Intrudify
Patchstack Bug Bounty Program
41 kredili kayıt · son 12 ayda 41 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-105884İstismar yok | WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilitywp media · rocket lazy load · CWE-79 | Orta6,5 | — | %0,2 | Bugün |
26İzleyin | CVE-2026-105875İstismar yok | WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilitybdthemes · prime slider – addons for elementor · CWE-79 | Orta6,5 | — | %0,2 | Bugün |
26İzleyin | CVE-2026-105873İstismar yok | WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilitybdthemes · element pack elementor addons · CWE-79 | Orta6,5 | — | %0,2 | Bugün |
26İzleyin | CVE-2026-104393İstismar yok | WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerabilitywedevs · happy addons for elementor · CWE-79 | Orta6,5 | — | %0,2 | Bugün |
26İzleyin | CVE-2026-104391İstismar yok | WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityexpresstech · quiz and survey master · CWE-79 | Orta6,5 | — | %0,2 | Bugün |
29İzleyin | CVE-2026-104406İstismar yok | WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerabilitypicu · picu · CWE-862 | Yüksek7,3 | — | %0,3 | 1 gün önce |
28İzleyin | CVE-2026-104395İstismar yok | WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerabilitypicu · picu · CWE-79 | Yüksek7,1 | — | %0,2 | 1 gün önce |
17İzleyin | CVE-2026-104675İstismar yok | WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerabilityliquid web / stellarwp · event tickets · CWE-862 | Orta4,3 | — | %0,2 | 2 gün önce |
28İzleyin | CVE-2026-104407İstismar yok | WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerabilityblubrry podcasting · powerpress podcasting · CWE-352 | Yüksek7,1 | — | %0,1 | 2 gün önce |
26İzleyin | CVE-2026-104404İstismar yok | WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityliquid web / stellarwp · givewp · CWE-79 | Orta6,5 | — | %0,2 | 2 gün önce |
26İzleyin | CVE-2026-102914İstismar yok | WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerabilitybrainstorm force · presto player · CWE-79 | Orta6,5 | — | %0,2 | 2 gün önce |
30İzleyin | CVE-2026-97307İstismar yok | WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerabilitystylemixthemes · cost calculator builder · CWE-201 | Yüksek7,5 | — | %0,2 | 3 gün önce |
35İzleyin | CVE-2026-96451Kavram kanıtı | WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityultimate member · ultimate member · CWE-639 | Yüksek8,8 | — | %0,3 | 4 gün önce |
26İzleyin | CVE-2026-103343İstismar yok | WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerabilitywp manageninja llc · fluentform · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-103339İstismar yok | WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilitywpmet · metform · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-103063İstismar yok | WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilitywpmet · elementskit elementor addons lite · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-102394İstismar yok | WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerabilitywpdeveloper · essential addons for elementor · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
28İzleyin | CVE-2026-102391İstismar yok | WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerabilityjetmonsters · jetformbuilder · CWE-79 | Yüksek7,1 | — | %0,1 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102376İstismar yok | WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerabilitywpmu dev · branda · CWE-79 | Yüksek7,1 | — | %0,2 | 30 Eyl 2026 |
28İzleyin | CVE-2026-100510İstismar yok | WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerabilityboldgrid · post and page builder by boldgrid · CWE-79 | Yüksek7,1 | — | %0,1 | 30 Eyl 2026 |
26İzleyin | CVE-2026-97301İstismar yok | WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilitycool plugins · cool formkit lite · CWE-79 | Orta6,5 | — | %0,2 | 30 Eyl 2026 |
26İzleyin | CVE-2026-97298İstismar yok | WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerabilitykingaddons · king addons for elementor · CWE-79 | Orta6,5 | — | %0,1 | 30 Eyl 2026 |
34İzleyin | CVE-2026-97293İstismar yok | WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerabilitydavid lingren · media library assistant · CWE-89 | Yüksek8,5 | — | %0,2 | 30 Eyl 2026 |
34İzleyin | CVE-2026-97287İstismar yok | WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerabilitynexcess · event tickets · CWE-89 | Yüksek8,5 | — | %0,2 | 30 Eyl 2026 |
26İzleyin | CVE-2026-97279İstismar yok | WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerabilitychouby · polylang · CWE-79 | Orta6,5 | — | %0,2 | 30 Eyl 2026 |
- CVE-2026-10588426İzleyin
WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wp media · rocket lazy loadBugün
- CVE-2026-10587526İzleyin
WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bdthemes · prime slider – addons for elementorBugün
- CVE-2026-10587326İzleyin
WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bdthemes · element pack elementor addonsBugün
- CVE-2026-10439326İzleyin
WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wedevs · happy addons for elementorBugün
- CVE-2026-10439126İzleyin
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0expresstech · quiz and survey masterBugün
- CVE-2026-10440629İzleyin
WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability
YüksekCVSS 7,3İstismar yokEPSS %0picu · picu1 gün önce
- CVE-2026-10439528İzleyin
WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0picu · picu1 gün önce
- CVE-2026-10467517İzleyin
WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0liquid web / stellarwp · event tickets2 gün önce
- CVE-2026-10440728İzleyin
WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0blubrry podcasting · powerpress podcasting2 gün önce
- CVE-2026-10440426İzleyin
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0liquid web / stellarwp · givewp2 gün önce
- CVE-2026-10291426İzleyin
WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0brainstorm force · presto player2 gün önce
- CVE-2026-9730730İzleyin
WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0stylemixthemes · cost calculator builder3 gün önce
- CVE-2026-9645135İzleyin
WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %0ultimate member · ultimate member4 gün önce
- CVE-2026-10334326İzleyin
WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wp manageninja llc · fluentform6 gün önce
- CVE-2026-10333926İzleyin
WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wpmet · metform6 gün önce
- CVE-2026-10306326İzleyin
WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wpmet · elementskit elementor addons lite6 gün önce
- CVE-2026-10239426İzleyin
WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wpdeveloper · essential addons for elementor6 gün önce
- CVE-2026-10239128İzleyin
WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0jetmonsters · jetformbuilder30 Eyl 2026
- CVE-2026-10237628İzleyin
WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpmu dev · branda30 Eyl 2026
- CVE-2026-10051028İzleyin
WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0boldgrid · post and page builder by boldgrid30 Eyl 2026
- CVE-2026-9730126İzleyin
WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0cool plugins · cool formkit lite30 Eyl 2026
- CVE-2026-9729826İzleyin
WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0kingaddons · king addons for elementor30 Eyl 2026
- CVE-2026-9729334İzleyin
WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0david lingren · media library assistant30 Eyl 2026
- CVE-2026-9728734İzleyin
WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0nexcess · event tickets30 Eyl 2026
- CVE-2026-9727926İzleyin
WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0chouby · polylang30 Eyl 2026