ifoundbug

16 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
32İzleyin	CVE-2026-2144İstismar yok	Magic Login Mail or QR Code <= 2.05 - Unauthenticated Privilege Escalation via Insecure QR Code File Storagekatsushi-kawamori · magic login mail or qr code · CWE-269 Kimlik doğrulamasız Yarış durumu	Yüksek8,1	—	%0,5	14 Şub 2026
18İzleyin	CVE-2025-12540İstismar yok	ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposuresharethis · sharethis dashboard for google analytics · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,7	—	%0,3	7 Oca 2026
39İzleyin	CVE-2025-10738İstismar yok	URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injectionrupok98 · url shortener plugin for wordpress · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,4	13 Ara 2025
39İzleyin	CVE-2025-11456İstismar yok	ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Uploadelula · wsdesk · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%0,7	21 Kas 2025
31İzleyin	CVE-2025-12139Kavram kanıtı	File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposureprinceahmed · file manager for google drive – integrate google drive · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%2,3	5 Kas 2025
28İzleyin	CVE-2025-11995İstismar yok	Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scriptingjackdewey · community events · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,2	—	%0,3	1 Kas 2025
25İzleyin	CVE-2025-10740İstismar yok	URL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link Manipulationrupok98 · url shortener plugin for wordpress · CWE-89 SQL enjeksiyonu	Orta6,3	—	%0,3	24 Eki 2025
28İzleyin	CVE-2025-10754İstismar yok	DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Uploadgeolocationtechnology · docodoco store locator · CWE-434 RCE Dosya yükleme	Yüksek7,2	—	%0,7	15 Eki 2025
28İzleyin	CVE-2025-10313İstismar yok	Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scriptingjankimoradiya · find and replace content for wordpress · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR) XSS	Yüksek7,2	—	%0,3	15 Eki 2025
39İzleyin	CVE-2025-10586İstismar yok	Community Events <= 1.5.1 - Unauthenticated SQL Injectionjackdewey · community events · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,5	8 Eki 2025
28İzleyin	CVE-2025-11204İstismar yok	RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injectionmetagauss · registrationmagic – custom registration forms, user registration, payment, and user login · CWE-89 SQL enjeksiyonu XSS	Yüksek7,2	—	%0,4	8 Eki 2025
39İzleyin	CVE-2025-10587İstismar yok	Community Events <= 1.5.1 - Unauthenticated SQL Injectionjackdewey · community events · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,4	8 Eki 2025
25İzleyin	CVE-2025-9985Kavram kanıtı	Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log Filemarceljm · featured image from url (fifu) · CWE-532 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,3	—	%11,8	26 Eyl 2025
21İzleyin	CVE-2025-9984İstismar yok	Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosuremarceljm · featured image from url (fifu) · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,3	26 Eyl 2025
19İzleyin	CVE-2025-10037İstismar yok	Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injectionmarceljm · featured image from url (fifu) · CWE-89 SQL enjeksiyonu	Orta4,9	—	%0,3	26 Eyl 2025
19İzleyin	CVE-2025-10036İstismar yok	Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injectionmarceljm · featured image from url (fifu) · CWE-89 SQL enjeksiyonu	Orta4,9	—	%0,3	26 Eyl 2025

CVE-2026-2144
32İzleyin
Magic Login Mail or QR Code <= 2.05 - Unauthenticated Privilege Escalation via Insecure QR Code File Storage
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yarış durumu
katsushi-kawamori · magic login mail or qr code14 Şub 2026
CVE-2025-12540
18İzleyin
ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure
OrtaCVSS 4,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
sharethis · sharethis dashboard for google analytics7 Oca 2026
CVE-2025-10738
39İzleyin
URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
rupok98 · url shortener plugin for wordpress13 Ara 2025
CVE-2025-11456
39İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Dosya yükleme
elula · wsdesk21 Kas 2025
CVE-2025-12139
31İzleyin
File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure
YüksekCVSS 7,5Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- Bilgi sızıntısı
princeahmed · file manager for google drive – integrate google drive5 Kas 2025
CVE-2025-11995
28İzleyin
Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting
YüksekCVSS 7,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
jackdewey · community events1 Kas 2025
CVE-2025-10740
25İzleyin
URL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link Manipulation
OrtaCVSS 6,3İstismar yokEPSS %0
- SQL enjeksiyonu
rupok98 · url shortener plugin for wordpress24 Eki 2025
CVE-2025-10754
28İzleyin
DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Dosya yükleme
geolocationtechnology · docodoco store locator15 Eki 2025
CVE-2025-10313
28İzleyin
Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
YüksekCVSS 7,2İstismar yokEPSS %0
jankimoradiya · find and replace content for wordpress15 Eki 2025
CVE-2025-10586
39İzleyin
Community Events <= 1.5.1 - Unauthenticated SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
jackdewey · community events8 Eki 2025
CVE-2025-11204
28İzleyin
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
- XSS
metagauss · registrationmagic – custom registration forms, user registration, payment, and user login8 Eki 2025
CVE-2025-10587
39İzleyin
Community Events <= 1.5.1 - Unauthenticated SQL Injection
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
jackdewey · community events8 Eki 2025
CVE-2025-9985
25İzleyin
Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
OrtaCVSS 5,3Kavram kanıtıEPSS %12
- Kimlik doğrulamasız
- Bilgi sızıntısı
marceljm · featured image from url (fifu)26 Eyl 2025
CVE-2025-9984
21İzleyin
Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
marceljm · featured image from url (fifu)26 Eyl 2025
CVE-2025-10037
19İzleyin
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
OrtaCVSS 4,9İstismar yokEPSS %0
- SQL enjeksiyonu
marceljm · featured image from url (fifu)26 Eyl 2025
CVE-2025-10036
19İzleyin
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
OrtaCVSS 4,9İstismar yokEPSS %0
- SQL enjeksiyonu
marceljm · featured image from url (fifu)26 Eyl 2025