VDsec
Patchstack Bug Bounty Program
6 kredili kayıt · son 12 ayda 6 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-32566İstismar yok | WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerabilityacpt · acpt (pro) - custom post types plugin for wordpress · CWE-266 | Kritik9,8 | — | %0,5 | 27 Ağu 2026 |
34İzleyin | CVE-2026-32564İstismar yok | WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerabilityacpt · acpt (pro) - custom post types plugin for wordpress · CWE-89 | Yüksek8,5 | — | %0,4 | 27 Ağu 2026 |
39İzleyin | CVE-2026-32563İstismar yok | WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerabilitya cpt · acpt (pro) - custom post types plugin for wordpress · CWE-502 | Kritik9,8 | — | %0,6 | 24 Ağu 2026 |
39İzleyin | CVE-2026-61967İstismar yok | WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerabilityminiorange · miniorange otp verification · CWE-640 | Kritik9,8 | — | %0,5 | 13 Ağu 2026 |
37İzleyin | CVE-2026-59514İstismar yok | WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerabilitymightynetworks vs buddyboss · buddyboss platform · CWE-89 | Kritik9,3 | — | %0,4 | 23 Tem 2026 |
29İzleyin | CVE-2026-57723İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerabilitye4jvikwp · vikbooking hotel booking engine & pms · CWE-352 | Yüksek7,4 | — | %0,2 | 1 Tem 2026 |
- CVE-2026-3256639İzleyin
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0acpt · acpt (pro) - custom post types plugin for wordpress27 Ağu 2026
- CVE-2026-3256434İzleyin
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0acpt · acpt (pro) - custom post types plugin for wordpress27 Ağu 2026
- CVE-2026-3256339İzleyin
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1a cpt · acpt (pro) - custom post types plugin for wordpress24 Ağu 2026
- CVE-2026-6196739İzleyin
WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0miniorange · miniorange otp verification13 Ağu 2026
- CVE-2026-5951437İzleyin
WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0mightynetworks vs buddyboss · buddyboss platform23 Tem 2026
- CVE-2026-5772329İzleyin
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0e4jvikwp · vikbooking hotel booking engine & pms1 Tem 2026