hivesec
Patchstack Bug Bounty Program
16 kredili kayıt · son 12 ayda 16 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-74019İstismar yok | WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerabilitypaulepro2019 · eprolo dropshipping · CWE-862 | Yüksek7,1 | — | %0,2 | 20 Ağu 2026 |
34İzleyin | CVE-2026-74013İstismar yok | WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerabilitywordpress.com · eshipper commerce · CWE-89 | Yüksek8,5 | — | %0,3 | 20 Ağu 2026 |
28İzleyin | CVE-2026-28170İstismar yok | WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability1meril · blog floating button · CWE-79 | Yüksek7,1 | — | %0,2 | 13 Ağu 2026 |
30İzleyin | CVE-2026-59529İstismar yok | WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerabilitymotov.net · ebook store · CWE-862 | Yüksek7,5 | — | %0,3 | 27 Tem 2026 |
32İzleyin | CVE-2026-57688İstismar yok | WordPress POS Entegratör plugin <= 3.7.103 - Broken Access Control vulnerabilitygurmehub · pos entegratör · CWE-862 | Yüksek8,2 | — | %0,3 | 2 Tem 2026 |
28İzleyin | CVE-2026-56040İstismar yok | WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilitywordpress.com · gutenverse form · CWE-79 | Yüksek7,1 | — | %0,2 | 26 Haz 2026 |
28İzleyin | CVE-2026-56039İstismar yok | WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerabilitywordpress.com · quick interest slider · CWE-79 | Yüksek7,1 | — | %0,2 | 26 Haz 2026 |
30İzleyin | CVE-2026-54810İstismar yok | WordPress Nexi XPay plugin <= 8.3.1 - Broken Access Control vulnerabilitynexi payments · nexi xpay · CWE-862 | Yüksek7,5 | — | %0,2 | 17 Haz 2026 |
34İzleyin | CVE-2026-39581İstismar yok | WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.4 - SQL Injection vulnerabilityactivity-log.com · wp sessions time monitoring full automatic · CWE-89 | Yüksek8,5 | — | %0,2 | 16 Haz 2026 |
37İzleyin | CVE-2026-39574İstismar yok | WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerabilityrealmag777 · inpost gallery · CWE-89 | Kritik9,3 | — | %0,2 | 16 Haz 2026 |
30İzleyin | CVE-2026-39490İstismar yok | WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerabilityartbees · jupiterx core · CWE-862 | Yüksek7,5 | — | %0,3 | 16 Haz 2026 |
28İzleyin | CVE-2026-39437İstismar yok | WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilitywpfactory · min max step quantity limits manager for woocommerce · CWE-79 | Yüksek7,1 | — | %0,1 | 16 Haz 2026 |
21İzleyin | CVE-2026-42644İstismar yok | WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerabilitywpdeveloper · betterdocs · CWE-497 | Orta5,3 | — | %0,2 | 29 Nis 2026 |
21İzleyin | CVE-2026-39505İstismar yok | WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerabilitycraig hewitt · seriously simple podcasting · CWE-862 | Orta5,3 | — | %0,2 | 8 Nis 2026 |
32İzleyin | CVE-2026-31921İstismar yok | WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerabilitydevteam haywoodtech · product rearrange for woocommerce · CWE-862 | Yüksek8,2 | — | %0,2 | 25 Mar 2026 |
37İzleyin | CVE-2026-31920İstismar yok | WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerabilitydevteam haywoodtech · product rearrange for woocommerce · CWE-89 | Kritik9,3 | — | %0,2 | 25 Mar 2026 |
- CVE-2026-7401928İzleyin
WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0paulepro2019 · eprolo dropshipping20 Ağu 2026
- CVE-2026-7401334İzleyin
WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0wordpress.com · eshipper commerce20 Ağu 2026
- CVE-2026-2817028İzleyin
WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %01meril · blog floating button13 Ağu 2026
- CVE-2026-5952930İzleyin
WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0motov.net · ebook store27 Tem 2026
- CVE-2026-5768832İzleyin
WordPress POS Entegratör plugin <= 3.7.103 - Broken Access Control vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0gurmehub · pos entegratör2 Tem 2026
- CVE-2026-5604028İzleyin
WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wordpress.com · gutenverse form26 Haz 2026
- CVE-2026-5603928İzleyin
WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wordpress.com · quick interest slider26 Haz 2026
- CVE-2026-5481030İzleyin
WordPress Nexi XPay plugin <= 8.3.1 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0nexi payments · nexi xpay17 Haz 2026
- CVE-2026-3958134İzleyin
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.4 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0activity-log.com · wp sessions time monitoring full automatic16 Haz 2026
- CVE-2026-3957437İzleyin
WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0realmag777 · inpost gallery16 Haz 2026
- CVE-2026-3949030İzleyin
WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0artbees · jupiterx core16 Haz 2026
- CVE-2026-3943728İzleyin
WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpfactory · min max step quantity limits manager for woocommerce16 Haz 2026
- CVE-2026-4264421İzleyin
WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpdeveloper · betterdocs29 Nis 2026
- CVE-2026-3950521İzleyin
WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0craig hewitt · seriously simple podcasting8 Nis 2026
- CVE-2026-3192132İzleyin
WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0devteam haywoodtech · product rearrange for woocommerce25 Mar 2026
- CVE-2026-3192037İzleyin
WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0devteam haywoodtech · product rearrange for woocommerce25 Mar 2026