NAWardRox
Patchstack Bug Bounty Program
11 kredili kayıt · son 12 ayda 1 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-69101İstismar yok | WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerabilityamentotech · workreap core · CWE-288 | Kritik9,8 | — | %0,6 | 22 Oca 2026 |
21İzleyin | CVE-2025-47583İstismar yok | WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerabilitydimitri grassi · salon booking system · CWE-352 | Orta5,4 | — | %0,1 | 19 May 2025 |
30İzleyin | CVE-2025-47567İstismar yok | WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerabilitylambertgroup · video player & fullscreen video background · CWE-89 | Yüksek7,6 | — | %0,4 | 16 May 2025 |
34İzleyin | CVE-2025-32618İstismar yok | WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerabilitypickplugins · wishlist · CWE-89 | Yüksek8,5 | — | %0,5 | 11 Nis 2025 |
37İzleyin | CVE-2025-31565İstismar yok | WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerabilitylisandro martinez · wpsmartcontracts · CWE-89 | Kritik9,3 | — | %0,6 | 11 Nis 2025 |
35İzleyin | CVE-2025-32220İstismar yok | WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerabilitysalonbookingsystem · salon booking system · CWE-862 | Yüksek8,8 | — | %0,5 | 4 Nis 2025 |
34İzleyin | CVE-2025-31564İstismar yok | WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerabilityaitool · ai auto tool content writing assistant (gemini writer, chatgpt ) all in one · CWE-89 | Yüksek8,5 | — | %0,4 | 1 Nis 2025 |
21İzleyin | CVE-2025-31826İstismar yok | WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerabilityanzar ahmed · ni woocommerce cost of goods · CWE-862 | Orta5,4 | — | %0,4 | 1 Nis 2025 |
37İzleyin | CVE-2025-26941İstismar yok | WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerabilityandy_moyle · church admin · CWE-89 | Kritik9,3 | — | %0,6 | 26 Mar 2025 |
37İzleyin | CVE-2025-26943İstismar yok | WordPress Easy Quotes plugin <= 1.2.2 - SQL Injection vulnerabilityjürgen müller · easy quotes · CWE-89 | Kritik9,3 | — | %0,5 | 25 Şub 2025 |
28İzleyin | CVE-2024-56247İstismar yok | WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerabilityafthemes · wp post author · CWE-89 | Yüksek7,2 | — | %0,4 | 2 Oca 2025 |
- CVE-2025-6910139İzleyin
WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
KritikCVSS 9,8İstismar yokEPSS %0amentotech · workreap core22 Oca 2026
- CVE-2025-4758321İzleyin
WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0dimitri grassi · salon booking system19 May 2025
- CVE-2025-4756730İzleyin
WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0lambertgroup · video player & fullscreen video background16 May 2025
- CVE-2025-3261834İzleyin
WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0pickplugins · wishlist11 Nis 2025
- CVE-2025-3156537İzleyin
WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0lisandro martinez · wpsmartcontracts11 Nis 2025
- CVE-2025-3222035İzleyin
WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0salonbookingsystem · salon booking system4 Nis 2025
- CVE-2025-3156434İzleyin
WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0aitool · ai auto tool content writing assistant (gemini writer, chatgpt ) all in one1 Nis 2025
- CVE-2025-3182621İzleyin
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0anzar ahmed · ni woocommerce cost of goods1 Nis 2025
- CVE-2025-2694137İzleyin
WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0andy_moyle · church admin26 Mar 2025
- CVE-2025-2694337İzleyin
WordPress Easy Quotes plugin <= 1.2.2 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0jürgen müller · easy quotes25 Şub 2025
- CVE-2024-5624728İzleyin
WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0afthemes · wp post author2 Oca 2025