JunHee CHO

Patchstack Bug Bounty Program

41 kredili kayıt · son 12 ayda 41 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
0İzleyin	CVE-2026-110516İstismar yok	All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attributeunknown · all in one addons for wpbakery page builder (formerly visual composer) · CWE-22 RCE Yol geçişi	—	—	—	Bugün
27İzleyin	CVE-2026-92396İstismar yok	Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_cssunknown · shopengine gutenberg woocommerce builder blocks addon · CWE-79 XSS	Orta6,8	—	%0,2	4 gün önce
26İzleyin	CVE-2026-88928İstismar yok	PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypassunknown · paycomet for woocommerce · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Orta6,5	—	%0,1	29 Eki 2026
26İzleyin	CVE-2026-107907İstismar yok	MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlistunknown · mas videos · CWE-862 Erişim denetimi (IDOR)	Orta6,5	—	%0,2	24 Eki 2026
26İzleyin	CVE-2026-92433İstismar yok	Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRFunknown · patreon wordpress · CWE-352 Kimlik doğrulamasız CSRF	Orta6,5	—	%0,1	17 Eki 2026
14İzleyin	CVE-2026-92431İstismar yok	Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumerationunknown · patreon wordpress · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Düşük3,7	—	%0,1	17 Eki 2026
21İzleyin	CVE-2026-92428İstismar yok	Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhookunknown · rede itaú for woocommerce · CWE-345 Kimlik doğrulamasız	Orta5,3	—	%0,1	15 Eki 2026
21İzleyin	CVE-2026-96900İstismar yok	Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDORunknown · cart abandonment recovery for woocommerce · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	14 Eki 2026
19İzleyin	CVE-2026-92426İstismar yok	YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletionunknown · yith woocommerce popup · CWE-863 Erişim denetimi (IDOR)	Orta4,9	—	%0,2	14 Eki 2026
21İzleyin	CVE-2026-91076İstismar yok	Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failedunknown · robokassa payment gateway for woocommerce · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	14 Eki 2026
21İzleyin	CVE-2026-87968İstismar yok	Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registrationunknown · product feed for google shopping, microsoft advertising and 40+ channels for woocommerce merchant · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	14 Eki 2026
39İzleyin	CVE-2026-62024İstismar yok	WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerabilitycodebard · codebard help desk · CWE-434 Dosya yükleme	Kritik9,9	—	%0,4	10 Eki 2026
21İzleyin	CVE-2026-107434İstismar yok	WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerabilityvideowhisper · micropayments · CWE-1284	Orta5,4	—	%0,2	10 Eki 2026
28İzleyin	CVE-2026-62026İstismar yok	WordPress Dashboard Notes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerabilitymightyminnow · dashboard notes · CWE-352 Kimlik doğrulamasız CSRF	Yüksek7,1	—	%0,0	9 Eki 2026
28İzleyin	CVE-2026-40807İstismar yok	WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerabilityaman · cf7 views – complete entry management for contact form 7 · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,1	6 Eki 2026
28İzleyin	CVE-2026-40806İstismar yok	WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityplugin devs · blog, posts and category filter for elementor · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,1	6 Eki 2026
26İzleyin	CVE-2026-94299İstismar yok	elegro Crypto Payment <= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN Callbackunknown · elegro crypto payment · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,5	—	%0,1	6 Eki 2026
21İzleyin	CVE-2026-90987İstismar yok	Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Priceunknown · easy paypal & stripe buy now button · CWE-472 Kimlik doğrulamasız	Orta5,3	—	%0,2	2 Eki 2026
28İzleyin	CVE-2026-103082İstismar yok	WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerabilityla-studio · la-studio element kit for elementor · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,2	—	%0,1	1 Eki 2026
30İzleyin	CVE-2026-97244İstismar yok	WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerabilitywpfunnels · creator lms · CWE-35 Yol geçişi	Yüksek7,5	—	%0,2	30 Eyl 2026
21İzleyin	CVE-2026-92436İstismar yok	Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDORunknown · mailchimp for woocommerce · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	27 Eyl 2026
16İzleyin	CVE-2026-89000İstismar yok	WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Rununknown · wpematico rss feed fetcher · CWE-918 SSRF	Orta4,1	—	%0,1	27 Eyl 2026
21İzleyin	CVE-2026-94080İstismar yok	WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerabilitywebwizards · marketking · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	23 Eyl 2026
26İzleyin	CVE-2026-92422İstismar yok	Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Routeunknown · meow gallery · CWE-345 Girişsiz RCE	Orta6,5	—	%0,1	20 Eyl 2026
17İzleyin	CVE-2026-92410İstismar yok	Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRFunknown · sign-up sheets · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	20 Eyl 2026

CVE-2026-110516
0İzleyin
All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute
İstismar yok
- RCE
- Yol geçişi
unknown · all in one addons for wpbakery page builder (formerly visual composer)Bugün
CVE-2026-92396
27İzleyin
Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
OrtaCVSS 6,8İstismar yokEPSS %0
- XSS
unknown · shopengine gutenberg woocommerce builder blocks addon4 gün önce
CVE-2026-88928
26İzleyin
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
unknown · paycomet for woocommerce29 Eki 2026
CVE-2026-107907
26İzleyin
MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
unknown · mas videos24 Eki 2026
CVE-2026-92433
26İzleyin
Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
unknown · patreon wordpress17 Eki 2026
CVE-2026-92431
14İzleyin
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
DüşükCVSS 3,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · patreon wordpress17 Eki 2026
CVE-2026-92428
21İzleyin
Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
unknown · rede itaú for woocommerce15 Eki 2026
CVE-2026-96900
21İzleyin
Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · cart abandonment recovery for woocommerce14 Eki 2026
CVE-2026-92426
19İzleyin
YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion
OrtaCVSS 4,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
unknown · yith woocommerce popup14 Eki 2026
CVE-2026-91076
21İzleyin
Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · robokassa payment gateway for woocommerce14 Eki 2026
CVE-2026-87968
21İzleyin
Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · product feed for google shopping, microsoft advertising and 40+ channels for woocommerce merchant14 Eki 2026
CVE-2026-62024
39İzleyin
WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability
KritikCVSS 9,9İstismar yokEPSS %0
- Dosya yükleme
codebard · codebard help desk10 Eki 2026
CVE-2026-107434
21İzleyin
WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
videowhisper · micropayments10 Eki 2026
CVE-2026-62026
28İzleyin
WordPress Dashboard Notes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
mightyminnow · dashboard notes9 Eki 2026
CVE-2026-40807
28İzleyin
WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
aman · cf7 views – complete entry management for contact form 76 Eki 2026
CVE-2026-40806
28İzleyin
WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
plugin devs · blog, posts and category filter for elementor6 Eki 2026
CVE-2026-94299
26İzleyin
elegro Crypto Payment <= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN Callback
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · elegro crypto payment6 Eki 2026
CVE-2026-90987
21İzleyin
Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
unknown · easy paypal & stripe buy now button2 Eki 2026
CVE-2026-103082
28İzleyin
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
la-studio · la-studio element kit for elementor1 Eki 2026
CVE-2026-97244
30İzleyin
WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0
- Yol geçişi
wpfunnels · creator lms30 Eyl 2026
CVE-2026-92436
21İzleyin
Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · mailchimp for woocommerce27 Eyl 2026
CVE-2026-89000
16İzleyin
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run
OrtaCVSS 4,1İstismar yokEPSS %0
- SSRF
unknown · wpematico rss feed fetcher27 Eyl 2026
CVE-2026-94080
21İzleyin
WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
webwizards · marketking23 Eyl 2026
CVE-2026-92422
26İzleyin
Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route
OrtaCVSS 6,5İstismar yokEPSS %0
- Girişsiz RCE
unknown · meow gallery20 Eyl 2026
CVE-2026-92410
17İzleyin
Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
unknown · sign-up sheets20 Eyl 2026