dc11

50 kredili kayıt · son 12 ayda 1 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
29İzleyin	CVE-2026-13690İstismar yok	UsersWP < 1.2.67 - Two-Factor Authentication Bypassunknown · userswp · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,4	—	%0,4	29 Tem 2026
24İzleyin	CVE-2023-0479İstismar yok	Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSStychesoftwares · print invoice \& delivery notes for woocommerce · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	16 Oca 2024
40Planlayın	CVE-2023-0224İstismar yok	GiveWP < 2.24.1 - Unauthenticated SQLigivewp · givewp · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%3,7	16 Oca 2024
21İzleyin	CVE-2021-24559İstismar yok	Qyrr < 0.7 - Authenticated (contributor+) Stored XSSpatrickposner · qyrr · CWE-79 XSS CSRF	Orta5,4	—	%0,2	16 Oca 2024
24İzleyin	CVE-2021-24432İstismar yok	Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)berocket · advanced ajax product filters · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	16 Oca 2024
38İzleyin	CVE-2023-5674İstismar yok	WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpointwpvibes · wp mail log · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%10,8	26 Ara 2023
35İzleyin	CVE-2023-5673İstismar yok	WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCEwpvibes · wp mail log · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%1,1	26 Ara 2023
26İzleyin	CVE-2023-5672İstismar yok	WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpointwpvibes · wp mail log · CWE-22 Yol geçişi	Orta6,5	—	%0,7	26 Ara 2023
35İzleyin	CVE-2023-5645İstismar yok	WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpointwpvibes · wp mail log · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,7	26 Ara 2023
30İzleyin	CVE-2023-5644İstismar yok	WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpointswpvibes · wp mail log · CWE-863 Erişim denetimi (IDOR)	Yüksek7,6	—	%0,5	26 Ara 2023
24İzleyin	CVE-2023-5325İstismar yok	Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSSlevantoan · woocommerce vietnam checkout · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	27 Kas 2023
21İzleyin	CVE-2023-4823İstismar yok	WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSSprasadkirpekar · wp meta and date remover · CWE-79 XSS	Orta5,4	—	%0,4	31 Eki 2023
40Planlayın	CVE-2023-4666Kavram kanıtı	Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload10web · form maker · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%3,3	16 Eki 2023
28İzleyin	CVE-2023-2805İstismar yok	SupportCandy < 3.1.7 - Admin+ SQLisupportcandy · supportcandy · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,9	19 Haz 2023
35İzleyin	CVE-2023-2719İstismar yok	SupportCandy < 3.1.7 - Subscriber+ SQLisupportcandy · supportcandy · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	19 Haz 2023
51Planlayın	CVE-2023-1730Kavram kanıtı	SupportCandy < 3.1.5 - Unauthenticated SQLisupportcandy · supportcandy · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%40,6	2 May 2023
26İzleyin	CVE-2023-0889İstismar yok	TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Updatemetagauss · themeflection numbers · CWE-862 Erişim denetimi (IDOR) CSRF	Orta6,5	—	%0,3	17 Nis 2023
35İzleyin	CVE-2023-0765İstismar yok	Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injectionbestwebsoft · gallery · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	17 Nis 2023
21İzleyin	CVE-2023-0764İstismar yok	Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scriptingbestwebsoft · gallery · CWE-79 XSS	Orta5,4	—	%0,4	17 Nis 2023
35İzleyin	CVE-2023-0820İstismar yok	User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRFbestwebsoft · user role · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,4	3 Nis 2023
32İzleyin	CVE-2023-0441İstismar yok	Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Updatesimplygallery · simply gallery blocks with lightbox · CWE-862 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,7	27 Mar 2023
35İzleyin	CVE-2023-0940İstismar yok	ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Resetmetagauss · profilegrid · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,8	20 Mar 2023
24İzleyin	CVE-2023-0876Kavram kanıtı	WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirectjoomunited · wp meta seo · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,7	20 Mar 2023
35İzleyin	CVE-2023-0875İstismar yok	WP Meta SEO < 4.5.3 - Subscriber+ SQLijoomunited · wp meta seo · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	20 Mar 2023
35İzleyin	CVE-2023-0477İstismar yok	Auto Featured Image < 3.9.16 - Author+ Arbitrary File Uploadcm-wp · auto featured image · CWE-434 Dosya yükleme	Yüksek8,8	—	%1,6	13 Mar 2023

CVE-2026-13690
29İzleyin
UsersWP < 1.2.67 - Two-Factor Authentication Bypass
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
unknown · userswp29 Tem 2026
CVE-2023-0479
24İzleyin
Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
tychesoftwares · print invoice \& delivery notes for woocommerce16 Oca 2024
CVE-2023-0224
40Planlayın
GiveWP < 2.24.1 - Unauthenticated SQLi
KritikCVSS 9,8İstismar yokEPSS %4
- Kimlik doğrulamasız
- SQL enjeksiyonu
givewp · givewp16 Oca 2024
CVE-2021-24559
21İzleyin
Qyrr < 0.7 - Authenticated (contributor+) Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
- CSRF
patrickposner · qyrr16 Oca 2024
CVE-2021-24432
24İzleyin
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
berocket · advanced ajax product filters16 Oca 2024
CVE-2023-5674
38İzleyin
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
YüksekCVSS 8,8İstismar yokEPSS %11
- SQL enjeksiyonu
wpvibes · wp mail log26 Ara 2023
CVE-2023-5673
35İzleyin
WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Dosya yükleme
wpvibes · wp mail log26 Ara 2023
CVE-2023-5672
26İzleyin
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
OrtaCVSS 6,5İstismar yokEPSS %1
- Yol geçişi
wpvibes · wp mail log26 Ara 2023
CVE-2023-5645
35İzleyin
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
wpvibes · wp mail log26 Ara 2023
CVE-2023-5644
30İzleyin
WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
YüksekCVSS 7,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wpvibes · wp mail log26 Ara 2023
CVE-2023-5325
24İzleyin
Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
levantoan · woocommerce vietnam checkout27 Kas 2023
CVE-2023-4823
21İzleyin
WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
prasadkirpekar · wp meta and date remover31 Eki 2023
CVE-2023-4666
40Planlayın
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %3
- pre-auth RCE
- Dosya yükleme
10web · form maker16 Eki 2023
CVE-2023-2805
28İzleyin
SupportCandy < 3.1.7 - Admin+ SQLi
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
supportcandy · supportcandy19 Haz 2023
CVE-2023-2719
35İzleyin
SupportCandy < 3.1.7 - Subscriber+ SQLi
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
supportcandy · supportcandy19 Haz 2023
CVE-2023-1730
51Planlayın
SupportCandy < 3.1.5 - Unauthenticated SQLi
KritikCVSS 9,8Kavram kanıtıEPSS %41
- Kimlik doğrulamasız
- SQL enjeksiyonu
supportcandy · supportcandy2 May 2023
CVE-2023-0889
26İzleyin
TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- CSRF
metagauss · themeflection numbers17 Nis 2023
CVE-2023-0765
35İzleyin
Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
bestwebsoft · gallery17 Nis 2023
CVE-2023-0764
21İzleyin
Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
bestwebsoft · gallery17 Nis 2023
CVE-2023-0820
35İzleyin
User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
bestwebsoft · user role3 Nis 2023
CVE-2023-0441
32İzleyin
Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update
YüksekCVSS 8,1İstismar yokEPSS %1
- Erişim denetimi (IDOR)
simplygallery · simply gallery blocks with lightbox27 Mar 2023
CVE-2023-0940
35İzleyin
ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
metagauss · profilegrid20 Mar 2023
CVE-2023-0876
24İzleyin
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Açık yönlendirme
joomunited · wp meta seo20 Mar 2023
CVE-2023-0875
35İzleyin
WP Meta SEO < 4.5.3 - Subscriber+ SQLi
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
joomunited · wp meta seo20 Mar 2023
CVE-2023-0477
35İzleyin
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %2
- Dosya yükleme
cm-wp · auto featured image13 Mar 2023