V1T
Patchstack Bug Bounty Program
35 kredili kayıt · son 12 ayda 35 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-116861İstismar yok | WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilitywpdesk · flexible chat · CWE-201 | Yüksek7,5 | — | %0,3 | 1 gün önce |
26İzleyin | CVE-2026-116849İstismar yok | WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilitybplugins · streamcast · CWE-79 | Orta6,5 | — | %0,1 | 3 gün önce |
26İzleyin | CVE-2026-24533İstismar yok | WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerabilitycozythemes · cozy blocks · CWE-79 | Orta6,5 | — | %0,1 | 3 gün önce |
37İzleyin | CVE-2026-115607İstismar yok | WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerabilitycrowd favorite · dxp toolkit · CWE-89 | Kritik9,3 | — | %0,2 | 4 gün önce |
28İzleyin | CVE-2026-115606İstismar yok | WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilitycrowd favorite · dxp toolkit · CWE-79 | Yüksek7,1 | — | %0,1 | 4 gün önce |
26İzleyin | CVE-2026-116400İstismar yok | WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilitybplugins · button block · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-116398İstismar yok | WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilitybplugins · content slider block · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-115966İstismar yok | WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilitybplugins · typing text – give your texts many typing effects · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-116395İstismar yok | WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilitybplugins · lightbox block · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-115961İstismar yok | WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilitybplugins · b slider · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-115956İstismar yok | WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerabilitybplugins · panorama viewer – 360 degree image + video viewer · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-115955İstismar yok | WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilitybplugins · advanced post block - post grid for wordpress block editor · CWE-79 | Orta6,5 | — | %0,1 | 6 gün önce |
28İzleyin | CVE-2026-111830İstismar yok | WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerabilitywp mailster · wp mailster · CWE-79 | Yüksek7,1 | — | %0,2 | 22 Eki 2026 |
26İzleyin | CVE-2026-111829İstismar yok | WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerabilitywp mailster · wp mailster · CWE-98 | Orta6,5 | — | %0,3 | 19 Eki 2026 |
26İzleyin | CVE-2026-111410İstismar yok | WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerabilitye2pdf.com · e2pdf · CWE-79 | Orta6,5 | — | %0,1 | 19 Eki 2026 |
26İzleyin | CVE-2026-108168İstismar yok | WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerabilitydlx plugins · custom query blocks · CWE-79 | Orta6,5 | — | %0,1 | 12 Eki 2026 |
36İzleyin | CVE-2026-62025İstismar yok | WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerabilitytailored media · tailored tools · CWE-434 | Kritik9,0 | — | %0,2 | 10 Eki 2026 |
39İzleyin | CVE-2026-104398İstismar yok | WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerabilityvillatheme · affi – affiliate marketing for woocommerce · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-96332İstismar yok | WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerabilityyalla ya! · simple payment · CWE-79 | Yüksek7,1 | — | %0,1 | 9 Eki 2026 |
26İzleyin | CVE-2026-62127İstismar yok | WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerabilitymediaron llc · wp plugin info card · CWE-79 | Orta6,5 | — | %0,1 | 8 Eki 2026 |
28İzleyin | CVE-2026-104814İstismar yok | WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityepiphyt · form block · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
26İzleyin | CVE-2026-104400İstismar yok | WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilitybplugins · b blocks · CWE-79 | Orta6,5 | — | %0,1 | 5 Eki 2026 |
30İzleyin | CVE-2026-100517İstismar yok | WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerabilityvillatheme · photo reviews for woocommerce · CWE-639 | Yüksek7,5 | — | %0,3 | 1 Eki 2026 |
28İzleyin | CVE-2026-92412İstismar yok | Five Star Restaurant Reviews < 2.3.14 - Reflected XSSunknown · five star restaurant reviews · CWE-79 | Yüksek7,1 | — | %0,1 | 1 Eki 2026 |
26İzleyin | CVE-2026-62111İstismar yok | WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerabilityido kobelkowsky · simple payment · CWE-79 | Orta6,5 | — | %0,2 | 11 Eyl 2026 |
- CVE-2026-11686130İzleyin
WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wpdesk · flexible chat1 gün önce
- CVE-2026-11684926İzleyin
WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · streamcast3 gün önce
- CVE-2026-2453326İzleyin
WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0cozythemes · cozy blocks3 gün önce
- CVE-2026-11560737İzleyin
WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0crowd favorite · dxp toolkit4 gün önce
- CVE-2026-11560628İzleyin
WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0crowd favorite · dxp toolkit4 gün önce
- CVE-2026-11640026İzleyin
WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · button block6 gün önce
- CVE-2026-11639826İzleyin
WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · content slider block6 gün önce
- CVE-2026-11596626İzleyin
WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · typing text – give your texts many typing effects6 gün önce
- CVE-2026-11639526İzleyin
WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · lightbox block6 gün önce
- CVE-2026-11596126İzleyin
WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · b slider6 gün önce
- CVE-2026-11595626İzleyin
WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · panorama viewer – 360 degree image + video viewer6 gün önce
- CVE-2026-11595526İzleyin
WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · advanced post block - post grid for wordpress block editor6 gün önce
- CVE-2026-11183028İzleyin
WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp mailster · wp mailster22 Eki 2026
- CVE-2026-11182926İzleyin
WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wp mailster · wp mailster19 Eki 2026
- CVE-2026-11141026İzleyin
WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0e2pdf.com · e2pdf19 Eki 2026
- CVE-2026-10816826İzleyin
WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0dlx plugins · custom query blocks12 Eki 2026
- CVE-2026-6202536İzleyin
WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability
KritikCVSS 9,0İstismar yokEPSS %0tailored media · tailored tools10 Eki 2026
- CVE-2026-10439839İzleyin
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0villatheme · affi – affiliate marketing for woocommerce10 Eki 2026
- CVE-2026-9633228İzleyin
WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0yalla ya! · simple payment9 Eki 2026
- CVE-2026-6212726İzleyin
WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0mediaron llc · wp plugin info card8 Eki 2026
- CVE-2026-10481428İzleyin
WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0epiphyt · form block6 Eki 2026
- CVE-2026-10440026İzleyin
WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bplugins · b blocks5 Eki 2026
- CVE-2026-10051730İzleyin
WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0villatheme · photo reviews for woocommerce1 Eki 2026
- CVE-2026-9241228İzleyin
Five Star Restaurant Reviews < 2.3.14 - Reflected XSS
YüksekCVSS 7,1İstismar yokEPSS %0unknown · five star restaurant reviews1 Eki 2026
- CVE-2026-6211126İzleyin
WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0ido kobelkowsky · simple payment11 Eyl 2026