Mrreee
Patchstack Bug Bounty Program
10 kredili kayıt · son 12 ayda 10 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
23İzleyin | CVE-2026-24628İstismar yok | WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerabilitysupsystic · photo gallery by supsystic · CWE-79 | Orta5,9 | — | %0,2 | 23 Tem 2026 |
28İzleyin | CVE-2026-22480İstismar yok | WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerabilitywebtoffee · product feed for woocommerce · CWE-502 | Yüksek7,2 | — | %0,5 | 25 Mar 2026 |
35İzleyin | CVE-2026-22471İstismar yok | WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerabilitymaximsecudeal · secudeal payments for ecommerce · CWE-502 | Yüksek8,8 | — | %0,3 | 5 Mar 2026 |
17İzleyin | CVE-2026-24966İstismar yok | WordPress Copyscape Premium plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerabilitycopyscape · copyscape premium · CWE-352 | Orta4,3 | — | %0,1 | 3 Şub 2026 |
30İzleyin | CVE-2026-24624İstismar yok | WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerabilitysaeros1984 · neoforum · CWE-89 | Yüksek7,6 | — | %0,3 | 23 Oca 2026 |
28İzleyin | CVE-2026-24623İstismar yok | WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilitysaeros1984 · neoforum · CWE-79 | Yüksek7,1 | — | %0,1 | 23 Oca 2026 |
21İzleyin | CVE-2026-24622İstismar yok | WordPress Suggestion Toolkit plugin <= 5.0 - Broken Access Control vulnerabilitysergiy dzysyak · suggestion toolkit · CWE-862 | Orta5,4 | — | %0,1 | 23 Oca 2026 |
23İzleyin | CVE-2026-24621İstismar yok | WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerabilityvladimir statsenko · terms descriptions · CWE-79 | Orta5,9 | — | %0,1 | 23 Oca 2026 |
21İzleyin | CVE-2026-24384İstismar yok | WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerabilitylaunchinteractive · merge + minify + refresh · CWE-352 | Orta5,4 | — | %0,1 | 22 Oca 2026 |
30İzleyin | CVE-2026-22470İstismar yok | WordPress FireStorm Professional Real Estate plugin <= 2.7.11 - SQL Injection vulnerabilityfirestorm plugins · firestorm professional real estate · CWE-89 | Yüksek7,6 | — | %0,3 | 22 Oca 2026 |
- CVE-2026-2462823İzleyin
WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0supsystic · photo gallery by supsystic23 Tem 2026
- CVE-2026-2248028İzleyin
WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0webtoffee · product feed for woocommerce25 Mar 2026
- CVE-2026-2247135İzleyin
WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0maximsecudeal · secudeal payments for ecommerce5 Mar 2026
- CVE-2026-2496617İzleyin
WordPress Copyscape Premium plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0copyscape · copyscape premium3 Şub 2026
- CVE-2026-2462430İzleyin
WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0saeros1984 · neoforum23 Oca 2026
- CVE-2026-2462328İzleyin
WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0saeros1984 · neoforum23 Oca 2026
- CVE-2026-2462221İzleyin
WordPress Suggestion Toolkit plugin <= 5.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0sergiy dzysyak · suggestion toolkit23 Oca 2026
- CVE-2026-2462123İzleyin
WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0vladimir statsenko · terms descriptions23 Oca 2026
- CVE-2026-2438421İzleyin
WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0launchinteractive · merge + minify + refresh22 Oca 2026
- CVE-2026-2247030İzleyin
WordPress FireStorm Professional Real Estate plugin <= 2.7.11 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0firestorm plugins · firestorm professional real estate22 Oca 2026