minhtuanact
Patchstack Bug Bounty Program
10 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2025-32138İstismar yok | WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerabilitysupsystic · easy google maps · CWE-611 | Orta6,6 | — | %0,5 | 4 Nis 2025 |
19İzleyin | CVE-2025-31827İstismar yok | WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerabilityvlad.olaru · fonto · CWE-22 | Orta4,9 | — | %0,5 | 3 Nis 2025 |
19İzleyin | CVE-2025-31825İstismar yok | WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerabilitypixelgrade · category icon · CWE-22 | Orta4,9 | — | %0,5 | 3 Nis 2025 |
28İzleyin | CVE-2025-22735İstismar yok | WordPress Tag Cloud Plugin - Tag Groups plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilitysteve burge · wordpress tag cloud plugin – tag groups · CWE-79 | Yüksek7,1 | — | %0,2 | 21 Oca 2025 |
32İzleyin | CVE-2025-22347İstismar yok | WordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerabilitybannersky · bsk forms blacklist · CWE-352 | Yüksek8,2 | — | %0,2 | 7 Oca 2025 |
30İzleyin | CVE-2023-47693İstismar yok | WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerabilitythemefic · ultimate addons for contact form 7 · CWE-862 | Yüksek7,5 | — | %0,5 | 2 Oca 2025 |
28İzleyin | CVE-2024-54312İstismar yok | WordPress افزونه پیامک ووکامرس Persian WooCommerce SMS plugin <= 7.0.5 - Reflected Cross Site Scripting (XSS) vulnerabilitypersianscript · persian woocommerce sms · CWE-79 | Yüksek7,1 | — | %0,4 | 13 Ara 2024 |
21İzleyin | CVE-2021-24128İstismar yok | Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)wpdarko · team members · CWE-79 | Orta5,4 | — | %0,6 | 18 Mar 2021 |
21İzleyin | CVE-2021-24127İstismar yok | ThirstyAffiliates < 3.9.3 - Authenticated Stored XSScaseproof · thirstyaffiliates affiliate link manager · CWE-79 | Orta5,4 | — | %0,6 | 18 Mar 2021 |
21İzleyin | CVE-2021-24126İstismar yok | Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scriptingenviragallery · envira gallery · CWE-79 | Orta5,4 | — | %0,6 | 18 Mar 2021 |
- CVE-2025-3213826İzleyin
WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerability
OrtaCVSS 6,6İstismar yokEPSS %0supsystic · easy google maps4 Nis 2025
- CVE-2025-3182719İzleyin
WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0vlad.olaru · fonto3 Nis 2025
- CVE-2025-3182519İzleyin
WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0pixelgrade · category icon3 Nis 2025
- CVE-2025-2273528İzleyin
WordPress Tag Cloud Plugin - Tag Groups plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0steve burge · wordpress tag cloud plugin – tag groups21 Oca 2025
- CVE-2025-2234732İzleyin
WordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0bannersky · bsk forms blacklist7 Oca 2025
- CVE-2023-4769330İzleyin
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0themefic · ultimate addons for contact form 72 Oca 2025
- CVE-2024-5431228İzleyin
WordPress افزونه پیامک ووکامرس Persian WooCommerce SMS plugin <= 7.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0persianscript · persian woocommerce sms13 Ara 2024
- CVE-2021-2412821İzleyin
Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0wpdarko · team members18 Mar 2021
- CVE-2021-2412721İzleyin
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0caseproof · thirstyaffiliates affiliate link manager18 Mar 2021
- CVE-2021-2412621İzleyin
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0enviragallery · envira gallery18 Mar 2021