thiennv
Patchstack Bug Bounty Program
72 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2025-32515İstismar yok | WordPress Terminal Africa plugin <= 1.13.24 - Cross Site Scripting (XSS) vulnerabilityterminalafrica · terminal africa · CWE-79 | Yüksek7,1 | — | %0,2 | 17 Nis 2025 |
28İzleyin | CVE-2025-32512İstismar yok | WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityrevampcrm · revamp crm for woocommerce · CWE-79 | Yüksek7,1 | — | %0,3 | 17 Nis 2025 |
28İzleyin | CVE-2025-32511İstismar yok | WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityexcellent dynamics · make email customizer for woocommerce · CWE-79 | Yüksek7,1 | — | %0,2 | 17 Nis 2025 |
28İzleyin | CVE-2025-24586İstismar yok | WordPress Shipment Tracker for Woocommerce plugin <= 1.4.23 - Cross Site Scripting (XSS) vulnerabilitybitsstech · shipment tracker for woocommerce · CWE-79 | Yüksek7,1 | — | %0,2 | 17 Nis 2025 |
28İzleyin | CVE-2025-24553İstismar yok | WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerabilityakadrama · shipping with venipak for woocommerce · CWE-79 | Yüksek7,1 | — | %0,2 | 17 Nis 2025 |
34İzleyin | CVE-2025-32567İstismar yok | WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerabilitydev02ali · easy post duplicator · CWE-89 | Yüksek8,5 | — | %0,5 | 11 Nis 2025 |
28İzleyin | CVE-2025-32517İstismar yok | WordPress MultiMailer plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityscand · multimailer · CWE-79 | Yüksek7,1 | — | %0,4 | 11 Nis 2025 |
28İzleyin | CVE-2025-32556İstismar yok | WordPress Simple Post Meta Manager Plugin <= 1.0.9 - CSRF to Reflected Cross-Site Scripting vulnerabilitysandor kovacs · simple post meta manager · CWE-352 | Yüksek7,1 | — | %0,1 | 9 Nis 2025 |
21İzleyin | CVE-2025-32249İstismar yok | WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerabilitydesigninvento · directorypress · CWE-352 | Orta5,4 | — | %0,2 | 4 Nis 2025 |
21İzleyin | CVE-2025-32178İstismar yok | WordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerability6storage · 6storage rentals · CWE-862 | Orta5,4 | — | %0,4 | 4 Nis 2025 |
35İzleyin | CVE-2025-32147İstismar yok | WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerabilitycoothemes · easy wp optimizer · CWE-862 | Yüksek8,8 | — | %0,5 | 4 Nis 2025 |
28İzleyin | CVE-2025-31626İstismar yok | WordPress Support Helpdesk Ticket System Lite plugin <= 4.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilitym. ali saleem · support helpdesk ticket system lite · CWE-79 | Yüksek7,1 | — | %0,2 | 3 Nis 2025 |
26İzleyin | CVE-2025-31736İstismar yok | WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerabilityrichtexteditor · rich text editor · CWE-862 | Orta6,5 | — | %0,3 | 3 Nis 2025 |
21İzleyin | CVE-2025-22629İstismar yok | WordPress iNET Webkit Plugin <= 1.2.2 - Broken Access Control vulnerabilityinet · inet webkit · CWE-862 | Orta5,3 | — | %0,2 | 27 Mar 2025 |
28İzleyin | CVE-2025-23731İstismar yok | WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityinfosoftplugin · tax report for woocommerce · CWE-79 | Yüksek7,1 | — | %0,3 | 3 Mar 2025 |
28İzleyin | CVE-2025-23555İstismar yok | WordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilitychenyenming · ui slider filter by price · CWE-79 | Yüksek7,1 | — | %0,3 | 3 Mar 2025 |
28İzleyin | CVE-2025-23516İstismar yok | WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilitybrainvireinfo · sale with razorpay · CWE-79 | Yüksek7,1 | — | %0,2 | 3 Mar 2025 |
28İzleyin | CVE-2025-23482İstismar yok | WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityazurecurve · azurecurve floating featured image · CWE-79 | Yüksek7,1 | — | %0,2 | 3 Mar 2025 |
28İzleyin | CVE-2025-24566İstismar yok | WordPress Intro Tour Tutorial DeepPresentation plugin <= 6.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilitytomáš groulík · intro tour tutorial deeppresentation · CWE-79 | Yüksek7,1 | — | %0,2 | 14 Şub 2025 |
30İzleyin | CVE-2025-24569İstismar yok | WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerabilityredefiningtheweb · pdf generator addon for elementor page builder · CWE-22 | Yüksek7,5 | — | %0,5 | 3 Şub 2025 |
28İzleyin | CVE-2025-23984İstismar yok | WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilitybrainvireinfo · dynamic url seo · CWE-79 | Yüksek7,1 | — | %0,3 | 3 Şub 2025 |
28İzleyin | CVE-2025-23599İstismar yok | WordPress eMarksheet plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerabilityaarvansh infotech · emarksheet · CWE-79 | Yüksek7,1 | — | %0,3 | 3 Şub 2025 |
28İzleyin | CVE-2025-24560İstismar yok | WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerabilityawesometogi · awesome event booking · CWE-79 | Yüksek7,1 | — | %0,2 | 31 Oca 2025 |
21İzleyin | CVE-2025-23985İstismar yok | WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilitybrainvireinfo · dynamic url seo · CWE-352 | Orta5,4 | — | %0,1 | 31 Oca 2025 |
28İzleyin | CVE-2025-22564İstismar yok | WordPress Pretty Url Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerabilityfaaiq · pretty url · CWE-79 | Yüksek7,1 | — | %0,3 | 31 Oca 2025 |
- CVE-2025-3251528İzleyin
WordPress Terminal Africa plugin <= 1.13.24 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0terminalafrica · terminal africa17 Nis 2025
- CVE-2025-3251228İzleyin
WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0revampcrm · revamp crm for woocommerce17 Nis 2025
- CVE-2025-3251128İzleyin
WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0excellent dynamics · make email customizer for woocommerce17 Nis 2025
- CVE-2025-2458628İzleyin
WordPress Shipment Tracker for Woocommerce plugin <= 1.4.23 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bitsstech · shipment tracker for woocommerce17 Nis 2025
- CVE-2025-2455328İzleyin
WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0akadrama · shipping with venipak for woocommerce17 Nis 2025
- CVE-2025-3256734İzleyin
WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0dev02ali · easy post duplicator11 Nis 2025
- CVE-2025-3251728İzleyin
WordPress MultiMailer plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0scand · multimailer11 Nis 2025
- CVE-2025-3255628İzleyin
WordPress Simple Post Meta Manager Plugin <= 1.0.9 - CSRF to Reflected Cross-Site Scripting vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0sandor kovacs · simple post meta manager9 Nis 2025
- CVE-2025-3224921İzleyin
WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0designinvento · directorypress4 Nis 2025
- CVE-2025-3217821İzleyin
WordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %06storage · 6storage rentals4 Nis 2025
- CVE-2025-3214735İzleyin
WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0coothemes · easy wp optimizer4 Nis 2025
- CVE-2025-3162628İzleyin
WordPress Support Helpdesk Ticket System Lite plugin <= 4.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0m. ali saleem · support helpdesk ticket system lite3 Nis 2025
- CVE-2025-3173626İzleyin
WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0richtexteditor · rich text editor3 Nis 2025
- CVE-2025-2262921İzleyin
WordPress iNET Webkit Plugin <= 1.2.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0inet · inet webkit27 Mar 2025
- CVE-2025-2373128İzleyin
WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0infosoftplugin · tax report for woocommerce3 Mar 2025
- CVE-2025-2355528İzleyin
WordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0chenyenming · ui slider filter by price3 Mar 2025
- CVE-2025-2351628İzleyin
WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0brainvireinfo · sale with razorpay3 Mar 2025
- CVE-2025-2348228İzleyin
WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0azurecurve · azurecurve floating featured image3 Mar 2025
- CVE-2025-2456628İzleyin
WordPress Intro Tour Tutorial DeepPresentation plugin <= 6.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0tomáš groulík · intro tour tutorial deeppresentation14 Şub 2025
- CVE-2025-2456930İzleyin
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0redefiningtheweb · pdf generator addon for elementor page builder3 Şub 2025
- CVE-2025-2398428İzleyin
WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0brainvireinfo · dynamic url seo3 Şub 2025
- CVE-2025-2359928İzleyin
WordPress eMarksheet plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0aarvansh infotech · emarksheet3 Şub 2025
- CVE-2025-2456028İzleyin
WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0awesometogi · awesome event booking31 Oca 2025
- CVE-2025-2398521İzleyin
WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0brainvireinfo · dynamic url seo31 Oca 2025
- CVE-2025-2256428İzleyin
WordPress Pretty Url Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0faaiq · pretty url31 Oca 2025