İçeriğe atla
Noroxi

zaim

Patchstack Bug Bounty Program

114 kredili kayıt · son 12 ayda 34 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-7438
    25İzleyin

    Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    OrtaCVSS 6,4İstismar yokEPSS %0

    boldthemes · bold timeline lite11 Eyl 2026

  • CVE-2026-7441
    25İzleyin

    Simple Yearly Archive <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    alphawolf · simple yearly archive5 Ağu 2026

  • CVE-2026-6972
    25İzleyin

    SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    sonalsinha21 · skt skill bar5 Ağu 2026

  • CVE-2026-7436
    25İzleyin

    WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute

    OrtaCVSS 6,4İstismar yokEPSS %0

    wpclever · wpc badge management for woocommerce29 Tem 2026

  • CVE-2026-27403
    26İzleyin

    WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    nerdpress · hubbub lite23 Tem 2026

  • CVE-2026-7640
    25İzleyin

    WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

    OrtaCVSS 6,4İstismar yokEPSS %0

    aguilatechnologies · wp customer area13 Tem 2026

  • CVE-2026-1382
    25İzleyin

    fresh Podcaster <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'freshpodcaster' Shortcode Attributes

    OrtaCVSS 6,4İstismar yokEPSS %0

    freshlabs · fresh podcaster11 Tem 2026

  • CVE-2026-13710
    25İzleyin

    Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Wid

    OrtaCVSS 6,4İstismar yokEPSS %0

    jegtheme · jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress10 Tem 2026

  • CVE-2026-6910
    25İzleyin

    Bookero.pl <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    OrtaCVSS 6,4İstismar yokEPSS %0

    safistudio · bookero.pl – system rezerwacji online9 Tem 2026

  • CVE-2025-14785
    25İzleyin

    Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site

    OrtaCVSS 6,4İstismar yokEPSS %0

    seedprod · website builder by seedprod — theme builder, landing page builder, coming soon page, maintenance mode8 Tem 2026

  • CVE-2026-57764
    26İzleyin

    WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    surbma · surbma | yoast seo breadcrumb shortcode2 Tem 2026

  • CVE-2026-57763
    26İzleyin

    WordPress Structured Content plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    gordon böhme · structured content2 Tem 2026

  • CVE-2026-57755
    26İzleyin

    WordPress Mosaic Gallery &#8211; Advanced Gallery plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    misbah wp · mosaic gallery &#8211; advanced gallery2 Tem 2026

  • CVE-2026-12732
    25İzleyin

    LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute

    OrtaCVSS 6,4İstismar yokEPSS %0

    thimpress · learnpress – wordpress lms plugin for create and sell online courses1 Tem 2026

  • CVE-2026-32455
    26İzleyin

    WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    realmag777 · mdtf13 Mar 2026

  • CVE-2026-32450
    26İzleyin

    WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    realmag777 · active products tables for woocommerce13 Mar 2026

  • CVE-2026-32449
    26İzleyin

    WordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    themifyme · themify event post13 Mar 2026

  • CVE-2026-32448
    26İzleyin

    WordPress Podlove Podcast Publisher plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    eric teubert · podlove podcast publisher13 Mar 2026

  • CVE-2025-69011
    26İzleyin

    WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    wpkube · cool tag cloud20 Şub 2026

  • CVE-2026-24630
    26İzleyin

    WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    design · stylish cost calculator23 Oca 2026

  • CVE-2026-22519
    26İzleyin

    WordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    buddydev · mediapress8 Oca 2026

  • CVE-2025-63005
    26İzleyin

    WordPress WordPress Tooltips plugin <= 10.9.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    tomas · wordpress tooltips31 Ara 2025

  • CVE-2025-63000
    26İzleyin

    WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    wpforchurch · sermon manager31 Ara 2025

  • CVE-2025-69017
    26İzleyin

    WordPress RestroPress plugin <= 3.2.8.6 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    magnigenie · restropress30 Ara 2025

  • CVE-2025-68533
    26İzleyin

    WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · wc builder24 Ara 2025