mroccon
Patchstack Bug Bounty Program
14 kredili kayıt · son 12 ayda 14 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-116386İstismar yok | WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerabilitycozy vision technologies pvt. ltd. · sms alert order notifications · CWE-266 | Kritik9,8 | — | %0,3 | 2 gün önce |
28İzleyin | CVE-2026-54855İstismar yok | WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilitycozmoslabs · profile builder · CWE-79 | Yüksek7,1 | — | %0,2 | 2 gün önce |
30İzleyin | CVE-2026-39734İstismar yok | WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerabilitysaad iqbal · wp easypay · CWE-35 | Yüksek7,5 | — | %0,4 | 2 gün önce |
21İzleyin | CVE-2026-116846İstismar yok | WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerabilitywp user manager · wp user manager · CWE-862 | Orta5,3 | — | %0,3 | 3 gün önce |
21İzleyin | CVE-2026-48884İstismar yok | WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerabilitywedevs · wp user frontend · CWE-862 | Orta5,3 | — | %0,2 | 3 gün önce |
35İzleyin | CVE-2026-116399İstismar yok | WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityinstawp · instawp connect · CWE-352 | Yüksek8,8 | — | %0,1 | 3 gün önce |
26İzleyin | CVE-2026-48196İstismar yok | WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerabilitykaliforms · kali forms · CWE-79 | Orta6,5 | — | %0,1 | 3 gün önce |
21İzleyin | CVE-2026-39741İstismar yok | WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerabilityrelywp · simple cloudflare turnstile · CWE-862 | Orta5,3 | — | %0,2 | 3 gün önce |
21İzleyin | CVE-2026-118093İstismar yok | WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerabilitywpfunnels team · product feed manager · CWE-862 | Orta5,3 | — | %0,2 | 3 gün önce |
17İzleyin | CVE-2026-42707İstismar yok | WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerabilityhivepress · hivepress claim listings · CWE-862 | Orta4,3 | — | %0,1 | 3 gün önce |
26İzleyin | CVE-2026-48195İstismar yok | WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerabilitybplugins · pdf poster · CWE-79 | Orta6,5 | — | %0,1 | 3 gün önce |
17İzleyin | CVE-2026-115960İstismar yok | WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerabilitywpexperts · apiexperts square for woocommerce · CWE-862 | Orta4,3 | — | %0,1 | 6 gün önce |
21İzleyin | CVE-2026-115959İstismar yok | WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerabilitywpexperts · apiexperts square for woocommerce · CWE-862 | Orta5,3 | — | %0,2 | 6 gün önce |
17İzleyin | CVE-2026-112843İstismar yok | WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerabilitywp chill · strong testimonials · CWE-862 | Orta4,3 | — | %0,1 | 22 Eki 2026 |
- CVE-2026-11638639İzleyin
WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0cozy vision technologies pvt. ltd. · sms alert order notifications2 gün önce
- CVE-2026-5485528İzleyin
WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0cozmoslabs · profile builder2 gün önce
- CVE-2026-3973430İzleyin
WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0saad iqbal · wp easypay2 gün önce
- CVE-2026-11684621İzleyin
WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wp user manager · wp user manager3 gün önce
- CVE-2026-4888421İzleyin
WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wedevs · wp user frontend3 gün önce
- CVE-2026-11639935İzleyin
WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0instawp · instawp connect3 gün önce
- CVE-2026-4819626İzleyin
WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0kaliforms · kali forms3 gün önce
- CVE-2026-3974121İzleyin
WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0relywp · simple cloudflare turnstile3 gün önce
- CVE-2026-11809321İzleyin
WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpfunnels team · product feed manager3 gün önce
- CVE-2026-4270717İzleyin
WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0hivepress · hivepress claim listings3 gün önce
- CVE-2026-4819526İzleyin
WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · pdf poster3 gün önce
- CVE-2026-11596017İzleyin
WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wpexperts · apiexperts square for woocommerce6 gün önce
- CVE-2026-11595921İzleyin
WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpexperts · apiexperts square for woocommerce6 gün önce
- CVE-2026-11284317İzleyin
WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wp chill · strong testimonials22 Eki 2026