Jitlada
Patchstack Bug Bounty Program
42 kredili kayıt · son 12 ayda 42 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-57780İstismar yok | WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerabilityplugin envision · envision page builder · CWE-79 | Orta6,5 | — | %0,2 | 13 Tem 2026 |
23İzleyin | CVE-2026-57762İstismar yok | WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerabilityandrew fiebert · simple urls · CWE-79 | Orta5,9 | — | %0,2 | 2 Tem 2026 |
26İzleyin | CVE-2026-27405İstismar yok | WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerabilitymagepeople inc. · wpbookingly · CWE-862 | Orta6,5 | — | %0,4 | 20 May 2026 |
23İzleyin | CVE-2026-39654İstismar yok | WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilityashish ajani · wp simple html sitemap · CWE-79 | Orta5,9 | — | %0,2 | 8 Nis 2026 |
26İzleyin | CVE-2026-39646İstismar yok | WordPress Leaflet Map plugin <= 3.4.4 - Cross Site Scripting (XSS) vulnerabilitybozdoz · leaflet map · CWE-79 | Orta6,5 | — | %0,2 | 8 Nis 2026 |
23İzleyin | CVE-2026-39638İstismar yok | WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerabilitythemeum · qubely · CWE-79 | Orta5,9 | — | %0,2 | 8 Nis 2026 |
26İzleyin | CVE-2026-39636Kavram kanıtı | WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerabilitylivemesh · livemesh addons for elementor · CWE-79 | Orta6,5 | — | %0,2 | 8 Nis 2026 |
21İzleyin | CVE-2026-39607İstismar yok | WordPress Filter Plus plugin <= 1.1.17 - Broken Access Control vulnerabilitywpbens · filter plus · CWE-862 | Orta5,4 | — | %0,2 | 8 Nis 2026 |
23İzleyin | CVE-2026-39604İstismar yok | WordPress MyBookTable Bookstore plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerabilityzookatron · mybooktable bookstore · CWE-79 | Orta5,9 | — | %0,2 | 8 Nis 2026 |
26İzleyin | CVE-2026-39575İstismar yok | WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerabilityronald huereca · custom query blocks · CWE-79 | Orta6,5 | — | %0,2 | 8 Nis 2026 |
26İzleyin | CVE-2026-39517İstismar yok | WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerabilitya wp life · blog filter · CWE-79 | Orta6,5 | — | %0,2 | 8 Nis 2026 |
10İzleyin | CVE-2026-39510İstismar yok | WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerabilitywp chill · image photo gallery final tiles grid · CWE-639 | Düşük2,7 | — | %0,3 | 8 Nis 2026 |
30İzleyin | CVE-2026-32441İstismar yok | WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerabilitywebtoffee · comments import & export · CWE-862 | Yüksek7,7 | — | %0,4 | 25 Mar 2026 |
26İzleyin | CVE-2026-22485İstismar yok | WordPress My Album Gallery plugin <= 1.0.4 - Arbitrary File Deletion vulnerabilityruhul amin · my album gallery · CWE-862 | Orta6,5 | — | %0,3 | 25 Mar 2026 |
34İzleyin | CVE-2025-69347İstismar yok | WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerabilityconvers lab · wpsubscription · CWE-639 | Yüksek8,6 | — | %0,4 | 25 Mar 2026 |
23İzleyin | CVE-2026-32419İstismar yok | WordPress List category posts plugin <= 0.93.1 - Cross Site Scripting (XSS) vulnerabilityfernando briano · list category posts · CWE-79 | Orta5,9 | — | %0,2 | 13 Mar 2026 |
23İzleyin | CVE-2026-32351İstismar yok | WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerabilityblubrry · powerpress podcasting · CWE-79 | Orta5,9 | — | %0,2 | 13 Mar 2026 |
26İzleyin | CVE-2026-31918İstismar yok | WordPress immonex Kickstart plugin <= 1.13.0 - Cross Site Scripting (XSS) vulnerabilityimmonex · immonex kickstart · CWE-79 | Orta6,5 | — | %0,2 | 13 Mar 2026 |
30İzleyin | CVE-2025-69394İstismar yok | WordPress Cnvrse plugin < 026.02.10.20 - Insecure Direct Object References (IDOR) vulnerabilitycnvrse · cnvrse · CWE-639 | Yüksek7,5 | — | %0,5 | 20 Şub 2026 |
17İzleyin | CVE-2026-25387İstismar yok | WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerabilityelementor · image optimizer by elementor · CWE-862 | Orta4,3 | — | %0,3 | 19 Şub 2026 |
22İzleyin | CVE-2026-25385İstismar yok | WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerabilitykaizencoders · url shortify · CWE-918 | Orta5,5 | — | %0,3 | 19 Şub 2026 |
17İzleyin | CVE-2026-25016İstismar yok | WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerabilitynelio software · nelio popups · CWE-862 | Orta4,3 | — | %0,2 | 3 Şub 2026 |
23İzleyin | CVE-2026-24626İstismar yok | WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerabilitylogichunt · logo slider · CWE-79 | Orta5,9 | — | %0,2 | 23 Oca 2026 |
23İzleyin | CVE-2026-24614İstismar yok | WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilitydevsbrain · flex qr code generator · CWE-79 | Orta5,9 | — | %0,2 | 23 Oca 2026 |
26İzleyin | CVE-2026-24555İstismar yok | WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerabilityartplacer · artplacer widget · CWE-79 | Orta6,5 | — | %0,2 | 23 Oca 2026 |
- CVE-2026-5778026İzleyin
WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0plugin envision · envision page builder13 Tem 2026
- CVE-2026-5776223İzleyin
WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0andrew fiebert · simple urls2 Tem 2026
- CVE-2026-2740526İzleyin
WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0magepeople inc. · wpbookingly20 May 2026
- CVE-2026-3965423İzleyin
WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0ashish ajani · wp simple html sitemap8 Nis 2026
- CVE-2026-3964626İzleyin
WordPress Leaflet Map plugin <= 3.4.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bozdoz · leaflet map8 Nis 2026
- CVE-2026-3963823İzleyin
WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0themeum · qubely8 Nis 2026
- CVE-2026-3963626İzleyin
WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5Kavram kanıtıEPSS %0livemesh · livemesh addons for elementor8 Nis 2026
- CVE-2026-3960721İzleyin
WordPress Filter Plus plugin <= 1.1.17 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wpbens · filter plus8 Nis 2026
- CVE-2026-3960423İzleyin
WordPress MyBookTable Bookstore plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0zookatron · mybooktable bookstore8 Nis 2026
- CVE-2026-3957526İzleyin
WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0ronald huereca · custom query blocks8 Nis 2026
- CVE-2026-3951726İzleyin
WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0a wp life · blog filter8 Nis 2026
- CVE-2026-3951010İzleyin
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability
DüşükCVSS 2,7İstismar yokEPSS %0wp chill · image photo gallery final tiles grid8 Nis 2026
- CVE-2026-3244130İzleyin
WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0webtoffee · comments import & export25 Mar 2026
- CVE-2026-2248526İzleyin
WordPress My Album Gallery plugin <= 1.0.4 - Arbitrary File Deletion vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0ruhul amin · my album gallery25 Mar 2026
- CVE-2025-6934734İzleyin
WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0convers lab · wpsubscription25 Mar 2026
- CVE-2026-3241923İzleyin
WordPress List category posts plugin <= 0.93.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0fernando briano · list category posts13 Mar 2026
- CVE-2026-3235123İzleyin
WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0blubrry · powerpress podcasting13 Mar 2026
- CVE-2026-3191826İzleyin
WordPress immonex Kickstart plugin <= 1.13.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0immonex · immonex kickstart13 Mar 2026
- CVE-2025-6939430İzleyin
WordPress Cnvrse plugin < 026.02.10.20 - Insecure Direct Object References (IDOR) vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cnvrse · cnvrse20 Şub 2026
- CVE-2026-2538717İzleyin
WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0elementor · image optimizer by elementor19 Şub 2026
- CVE-2026-2538522İzleyin
WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 5,5İstismar yokEPSS %0kaizencoders · url shortify19 Şub 2026
- CVE-2026-2501617İzleyin
WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0nelio software · nelio popups3 Şub 2026
- CVE-2026-2462623İzleyin
WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0logichunt · logo slider23 Oca 2026
- CVE-2026-2461423İzleyin
WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0devsbrain · flex qr code generator23 Oca 2026
- CVE-2026-2455526İzleyin
WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0artplacer · artplacer widget23 Oca 2026