Taylsec
Patchstack Bug Bounty Program
10 kredili kayıt · son 12 ayda 10 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-39793İstismar yok | WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerabilitynicu micle · simple jwt login · CWE-288 | Yüksek8,8 | — | %0,3 | 6 Eki 2026 |
39İzleyin | CVE-2026-73993İstismar yok | WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerabilityroxnor · fundengine · CWE-502 | Kritik9,8 | — | %0,5 | 20 Ağu 2026 |
30İzleyin | CVE-2026-61984İstismar yok | WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerabilityamauri · wpmobile.app · CWE-862 | Yüksek7,5 | — | %0,3 | 13 Ağu 2026 |
35İzleyin | CVE-2026-28176İstismar yok | WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerabilitybooking activities team · booking activities · CWE-502 | Yüksek8,8 | — | %0,4 | 13 Ağu 2026 |
37İzleyin | CVE-2026-28142İstismar yok | WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerabilityshamalli · web directory free · CWE-89 | Kritik9,3 | — | %0,4 | 13 Ağu 2026 |
32İzleyin | CVE-2026-27543İstismar yok | WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerabilityfluxbuilder · mstore api · CWE-266 | Yüksek8,1 | — | %0,3 | 13 Ağu 2026 |
30İzleyin | CVE-2026-27538İstismar yok | WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerabilitywpdirectorykit · wp directory kit · CWE-89 | Yüksek7,5 | — | %0,3 | 13 Ağu 2026 |
28İzleyin | CVE-2026-65554İstismar yok | WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerabilitylattepress · anspress – question and answer · CWE-862 | Yüksek7,1 | — | %0,3 | 6 Ağu 2026 |
39İzleyin | CVE-2026-59540İstismar yok | WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerabilitycozy vision technologies pvt. ltd. · sms alert order notifications · CWE-266 | Kritik9,8 | — | %0,4 | 23 Tem 2026 |
28İzleyin | CVE-2026-57718İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-79 | Yüksek7,1 | — | %0,2 | 13 Tem 2026 |
- CVE-2026-3979335İzleyin
WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0nicu micle · simple jwt login6 Eki 2026
- CVE-2026-7399339İzleyin
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0roxnor · fundengine20 Ağu 2026
- CVE-2026-6198430İzleyin
WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0amauri · wpmobile.app13 Ağu 2026
- CVE-2026-2817635İzleyin
WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0booking activities team · booking activities13 Ağu 2026
- CVE-2026-2814237İzleyin
WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0shamalli · web directory free13 Ağu 2026
- CVE-2026-2754332İzleyin
WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0fluxbuilder · mstore api13 Ağu 2026
- CVE-2026-2753830İzleyin
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wpdirectorykit · wp directory kit13 Ağu 2026
- CVE-2026-6555428İzleyin
WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0lattepress · anspress – question and answer6 Ağu 2026
- CVE-2026-5954039İzleyin
WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0cozy vision technologies pvt. ltd. · sms alert order notifications23 Tem 2026
- CVE-2026-5771828İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)13 Tem 2026