VanTastic
Patchstack Bug Bounty Program
31 kredili kayıt · son 12 ayda 31 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-81283İstismar yok | WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerabilitywedevs · wp user frontend · CWE-502 | Yüksek8,8 | — | %0,5 | 2 Eyl 2026 |
30İzleyin | CVE-2026-28167İstismar yok | WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerabilitysuper forms · super forms · CWE-22 | Yüksek7,5 | — | %0,5 | 24 Ağu 2026 |
39İzleyin | CVE-2026-28165İstismar yok | WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerabilityunitedover, llc · digits · CWE-266 | Kritik9,8 | — | %0,5 | 24 Ağu 2026 |
37İzleyin | CVE-2026-73339İstismar yok | WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerabilitywebnus inc. · modern events calendar · CWE-89 | Kritik9,3 | — | %0,4 | 18 Ağu 2026 |
39İzleyin | CVE-2026-66691İstismar yok | WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerabilityscriptsbundle · nokri · CWE-640 | Kritik9,8 | — | %0,5 | 13 Ağu 2026 |
29İzleyin | CVE-2026-28189İstismar yok | WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerabilityroland barker · participants database · CWE-22 | Yüksek7,4 | — | %0,4 | 13 Ağu 2026 |
26İzleyin | CVE-2026-28174İstismar yok | WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityarraytics · wp event solution · CWE-201 | Orta6,5 | — | %0,4 | 13 Ağu 2026 |
28İzleyin | CVE-2026-28173İstismar yok | WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityarraytics · wp event solution · CWE-862 | Yüksek7,1 | — | %0,3 | 13 Ağu 2026 |
28İzleyin | CVE-2026-65509İstismar yok | WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerabilitywpdatatables · wpdatatables · CWE-79 | Yüksek7,1 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-59536İstismar yok | WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerabilitycocart headless · cocart – headless ecommerce · CWE-862 | Yüksek7,5 | — | %0,3 | 27 Tem 2026 |
30İzleyin | CVE-2026-65495İstismar yok | WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerabilitydokan multivendor plugin · dokan pro · CWE-862 | Yüksek7,5 | — | %0,4 | 23 Tem 2026 |
39İzleyin | CVE-2026-59544İstismar yok | WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerabilitythrive themes coupon · thrive quiz builder · CWE-502 | Kritik9,8 | — | %0,6 | 23 Tem 2026 |
37İzleyin | CVE-2026-59515İstismar yok | WordPress AIWU plugin <= 1.5.4 - SQL Injection vulnerabilitysergey · aiwu · CWE-89 | Kritik9,3 | — | %0,4 | 13 Tem 2026 |
34İzleyin | CVE-2026-57771İstismar yok | WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerabilitymilan petrovic · gd rating system · CWE-89 | Yüksek8,5 | — | %0,4 | 13 Tem 2026 |
28İzleyin | CVE-2026-57725İstismar yok | WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerabilitythemeum · kirki · CWE-79 | Yüksek7,1 | — | %0,3 | 13 Tem 2026 |
39İzleyin | CVE-2026-57724İstismar yok | WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerabilitythemeum · kirki · CWE-502 | Kritik9,8 | — | %0,6 | 13 Tem 2026 |
26İzleyin | CVE-2026-57390İstismar yok | WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.167 - Broken Access Control vulnerabilityedgarrojas · extra product options builder for woocommerce · CWE-862 | Orta6,5 | — | %0,3 | 13 Tem 2026 |
26İzleyin | CVE-2026-57680İstismar yok | WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerabilitythemeum · kirki · CWE-639 | Orta6,5 | — | %0,3 | 2 Tem 2026 |
30İzleyin | CVE-2026-56069İstismar yok | WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerabilitysite building with toolset · toolset forms · CWE-639 | Yüksek7,5 | — | %0,4 | 26 Haz 2026 |
39İzleyin | CVE-2026-56057İstismar yok | WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerabilityuncanny owl · uncanny automator pro · CWE-502 | Kritik9,8 | — | %0,6 | 26 Haz 2026 |
39İzleyin | CVE-2026-56033İstismar yok | WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerabilitydokan multivendor plugin · dokan pro · CWE-266 | Kritik9,8 | — | %0,5 | 26 Haz 2026 |
32İzleyin | CVE-2026-56031İstismar yok | WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerabilityuncanny owl · uncanny automator · CWE-502 | Yüksek8,1 | — | %0,4 | 26 Haz 2026 |
35İzleyin | CVE-2026-56053İstismar yok | WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerabilityeventprime · eventprime · CWE-502 | Yüksek8,8 | — | %0,5 | 25 Haz 2026 |
28İzleyin | CVE-2026-54189İstismar yok | WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerabilityjetimpex inc. · jetengine · CWE-79 | Yüksek7,1 | — | %0,3 | 17 Haz 2026 |
28İzleyin | CVE-2026-54188İstismar yok | WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerabilityjetimpex inc. · jetengine · CWE-79 | Yüksek7,1 | — | %0,3 | 17 Haz 2026 |
- CVE-2026-8128335İzleyin
WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1wedevs · wp user frontend2 Eyl 2026
- CVE-2026-2816730İzleyin
WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1super forms · super forms24 Ağu 2026
- CVE-2026-2816539İzleyin
WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0unitedover, llc · digits24 Ağu 2026
- CVE-2026-7333937İzleyin
WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0webnus inc. · modern events calendar18 Ağu 2026
- CVE-2026-6669139İzleyin
WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0scriptsbundle · nokri13 Ağu 2026
- CVE-2026-2818929İzleyin
WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0roland barker · participants database13 Ağu 2026
- CVE-2026-2817426İzleyin
WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0arraytics · wp event solution13 Ağu 2026
- CVE-2026-2817328İzleyin
WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0arraytics · wp event solution13 Ağu 2026
- CVE-2026-6550928İzleyin
WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpdatatables · wpdatatables6 Ağu 2026
- CVE-2026-5953630İzleyin
WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cocart headless · cocart – headless ecommerce27 Tem 2026
- CVE-2026-6549530İzleyin
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0dokan multivendor plugin · dokan pro23 Tem 2026
- CVE-2026-5954439İzleyin
WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1thrive themes coupon · thrive quiz builder23 Tem 2026
- CVE-2026-5951537İzleyin
WordPress AIWU plugin <= 1.5.4 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0sergey · aiwu13 Tem 2026
- CVE-2026-5777134İzleyin
WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0milan petrovic · gd rating system13 Tem 2026
- CVE-2026-5772528İzleyin
WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themeum · kirki13 Tem 2026
- CVE-2026-5772439İzleyin
WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1themeum · kirki13 Tem 2026
- CVE-2026-5739026İzleyin
WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.167 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0edgarrojas · extra product options builder for woocommerce13 Tem 2026
- CVE-2026-5768026İzleyin
WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0themeum · kirki2 Tem 2026
- CVE-2026-5606930İzleyin
WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0site building with toolset · toolset forms26 Haz 2026
- CVE-2026-5605739İzleyin
WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1uncanny owl · uncanny automator pro26 Haz 2026
- CVE-2026-5603339İzleyin
WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0dokan multivendor plugin · dokan pro26 Haz 2026
- CVE-2026-5603132İzleyin
WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0uncanny owl · uncanny automator26 Haz 2026
- CVE-2026-5605335İzleyin
WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1eventprime · eventprime25 Haz 2026
- CVE-2026-5418928İzleyin
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0jetimpex inc. · jetengine17 Haz 2026
- CVE-2026-5418828İzleyin
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0jetimpex inc. · jetengine17 Haz 2026