pnn219
Patchstack Bug Bounty Program
13 kredili kayıt · son 12 ayda 13 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-111403İstismar yok | WordPress WP Inventory Manager plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerabilitywp inventory · wp inventory manager · CWE-79 | Yüksek7,1 | — | %0,1 | 3 gün önce |
27İzleyin | CVE-2026-120249İstismar yok | Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routesthelia · thelia back-office default twig template · CWE-352 | Orta6,9 | — | %0,1 | 1 Kas 2026 |
18İzleyin | CVE-2026-120248İstismar yok | Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploadsthelia · thelia · CWE-79 | Orta4,6 | — | %0,2 | 1 Kas 2026 |
28İzleyin | CVE-2026-120207İstismar yok | Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routesthelia · thelia page module · CWE-352 | Yüksek7,0 | — | %0,2 | 31 Eki 2026 |
23İzleyin | CVE-2026-120206İstismar yok | Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actionsthelia · thelia · CWE-352 | Orta5,9 | — | %0,1 | 31 Eki 2026 |
29İzleyin | CVE-2026-120205İstismar yok | Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Namethelia · thelia · CWE-79 | Yüksek7,4 | — | %0,2 | 31 Eki 2026 |
28İzleyin | CVE-2026-116851İstismar yok | WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityimplecode · ecommerce product catalog · CWE-79 | Yüksek7,1 | — | %0,1 | 30 Eki 2026 |
27İzleyin | CVE-2026-119702İstismar yok | WPGraphQL before 2.24.1 Missing Authorization via createComment Mutationwpgraphql · wpgraphql · CWE-862 | Orta6,9 | — | %0,3 | 30 Eki 2026 |
27İzleyin | CVE-2026-119701İstismar yok | WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutationswpgraphql · wpgraphql · CWE-770 | Orta6,9 | — | %0,5 | 30 Eki 2026 |
27İzleyin | CVE-2026-119700İstismar yok | WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutationswpgraphql · wpgraphql · CWE-204 | Orta6,9 | — | %0,3 | 30 Eki 2026 |
27İzleyin | CVE-2026-119699İstismar yok | WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoSwpgraphql · wpgraphql smart cache · CWE-770 | Orta6,9 | — | %0,4 | 30 Eki 2026 |
20İzleyin | CVE-2026-119054İstismar yok | Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-urlthemeisle · multiple pages generator by themeisle · CWE-79 | Orta5,1 | — | %0,2 | 29 Eki 2026 |
27İzleyin | CVE-2026-118757İstismar yok | PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_feespi websolution · piweb disable payment method / partial payment for woocommerce · CWE-862 | Orta6,9 | — | %0,2 | 28 Eki 2026 |
- CVE-2026-11140328İzleyin
WordPress WP Inventory Manager plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp inventory · wp inventory manager3 gün önce
- CVE-2026-12024927İzleyin
Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes
OrtaCVSS 6,9İstismar yokEPSS %0thelia · thelia back-office default twig template1 Kas 2026
- CVE-2026-12024818İzleyin
Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads
OrtaCVSS 4,6İstismar yokEPSS %0thelia · thelia1 Kas 2026
- CVE-2026-12020728İzleyin
Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes
YüksekCVSS 7,0İstismar yokEPSS %0thelia · thelia page module31 Eki 2026
- CVE-2026-12020623İzleyin
Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions
OrtaCVSS 5,9İstismar yokEPSS %0thelia · thelia31 Eki 2026
- CVE-2026-12020529İzleyin
Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name
YüksekCVSS 7,4İstismar yokEPSS %0thelia · thelia31 Eki 2026
- CVE-2026-11685128İzleyin
WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0implecode · ecommerce product catalog30 Eki 2026
- CVE-2026-11970227İzleyin
WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation
OrtaCVSS 6,9İstismar yokEPSS %0wpgraphql · wpgraphql30 Eki 2026
- CVE-2026-11970127İzleyin
WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations
OrtaCVSS 6,9İstismar yokEPSS %0wpgraphql · wpgraphql30 Eki 2026
- CVE-2026-11970027İzleyin
WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations
OrtaCVSS 6,9İstismar yokEPSS %0wpgraphql · wpgraphql30 Eki 2026
- CVE-2026-11969927İzleyin
WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS
OrtaCVSS 6,9İstismar yokEPSS %0wpgraphql · wpgraphql smart cache30 Eki 2026
- CVE-2026-11905420İzleyin
Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url
OrtaCVSS 5,1İstismar yokEPSS %0themeisle · multiple pages generator by themeisle29 Eki 2026
- CVE-2026-11875727İzleyin
PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees
OrtaCVSS 6,9İstismar yokEPSS %0pi websolution · piweb disable payment method / partial payment for woocommerce28 Eki 2026