Jiemook
Patchstack Bug Bounty Program
6 kredili kayıt · son 12 ayda 6 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2026-93880İstismar yok | Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholderwpsoul · greenshift – animation and page builder blocks · CWE-79 | Orta6,1 | — | %0,2 | 2 Eki 2026 |
39İzleyin | CVE-2026-14281Kavram kanıtı | Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter101gen · automation web platform – notifications and otp for woocommerce, advanced country code · CWE-269 | Kritik9,8 | — | %0,5 | 25 Eyl 2026 |
28İzleyin | CVE-2026-84765İstismar yok | WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerabilityjohn havlik · breadcrumb navxt · CWE-79 | Yüksek7,1 | — | %0,2 | 3 Eyl 2026 |
37İzleyin | CVE-2026-81763İstismar yok | WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerabilityウェブ屋のさとーさん · throws spam away · CWE-89 | Kritik9,3 | — | %0,4 | 31 Ağu 2026 |
28İzleyin | CVE-2026-81290İstismar yok | WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerabilityicegram · email subscribers & newsletters · CWE-79 | Yüksek7,1 | — | %0,2 | 31 Ağu 2026 |
40Planlayın | CVE-2026-82970İstismar yok | WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerabilitywp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent · CWE-434 | Kritik10,0 | — | %0,5 | 31 Ağu 2026 |
- CVE-2026-9388024İzleyin
Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder
OrtaCVSS 6,1İstismar yokEPSS %0wpsoul · greenshift – animation and page builder blocks2 Eki 2026
- CVE-2026-1428139İzleyin
Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %0101gen · automation web platform – notifications and otp for woocommerce, advanced country code25 Eyl 2026
- CVE-2026-8476528İzleyin
WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0john havlik · breadcrumb navxt3 Eyl 2026
- CVE-2026-8176337İzleyin
WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0ウェブ屋のさとーさん · throws spam away31 Ağu 2026
- CVE-2026-8129028İzleyin
WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0icegram · email subscribers & newsletters31 Ağu 2026
- CVE-2026-8297040Planlayın
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability
KritikCVSS 10,0İstismar yokEPSS %0wp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent31 Ağu 2026