buiih

13 kredili kayıt · son 12 ayda 13 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
28İzleyin	CVE-2026-127211İstismar yok	MultiVendorX WordPress Plugin < 5.0.22 Broken Access Control via stores REST Routemultivendorx · multivendorx – woocommerce multivendor marketplace ai powered solutions · CWE-862 Erişim denetimi (IDOR)	Yüksek7,1	—	—	Bugün
21İzleyin	CVE-2026-127207İstismar yok	Sendcloud for WooCommerce 1.0.41 Missing Authorization via AJAX Actionssendcloud · sendcloud for woocommerce: automated shipping, branded tracking & returns · CWE-862 Erişim denetimi (IDOR) CSRF	Orta5,3	—	—	Bugün
27İzleyin	CVE-2026-127206İstismar yok	Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA Bypasshookandhook · image captcha for contact form 7 and wpforms by hookandhook (dsgvo/gdpr) · CWE-804 Kimlik doğrulamasız	Orta6,9	—	—	Bugün
34İzleyin	CVE-2026-127204İstismar yok	WooCommerce PayPal Pro Payment Gateway < 4.1.1 Payment Bypass via pp_capture_orderwp.insider · payment gateway for paypal pro, paypal checkout & subscriptions for woocommerce · CWE-345 Kimlik doğrulamasız	Yüksek8,7	—	—	1 gün önce
21İzleyin	CVE-2026-124018İstismar yok	Gutenverse Form WordPress Plugin < 3.2.2 CSV Formula Injection via Form Submissionjegstudio · gutenverse form – contact form builder, block form & booking form · CWE-1236 Girişsiz RCE	Orta5,3	—	—	1 gün önce
9İzleyin	CVE-2026-125745İstismar yok	WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAXmadalinungureanu · custom post types and custom fields creator – wck · CWE-862 Erişim denetimi (IDOR)	Düşük2,3	—	%0,1	3 gün önce
27İzleyin	CVE-2026-119751İstismar yok	Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blockskeywordrush · content egg – affiliate product importer & price comparison · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,9	—	%0,2	5 Kas 2026
36İzleyin	CVE-2026-122220İstismar yok	WPO365 LOGIN before 45.2 SAML Replay Protection Bypasswpo365 · wpo365 \| seamless wordpress + microsoft integration (wpo365 \| login) · CWE-294 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,3	4 Kas 2026
21İzleyin	CVE-2026-121993İstismar yok	wePOS before 2.0.3 Missing Authorization via payment/process Endpointwedevs · wepos – point of sale (pos) for woocommerce & dokan · CWE-862 Erişim denetimi (IDOR)	Orta5,3	—	%0,2	4 Kas 2026
21İzleyin	CVE-2026-119745İstismar yok	Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_downloadmultivendorx · multivendorx · CWE-862 Erişim denetimi (IDOR)	Orta5,3	—	%0,2	4 Kas 2026
25İzleyin	CVE-2026-121970İstismar yok	Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgerywphostingdev · pay with vipps and mobilepay for woocommerce · CWE-347 Kimlik doğrulamasız Zayıf kripto	Orta6,3	—	%0,1	4 Kas 2026
34İzleyin	CVE-2026-112355İstismar yok	MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST APImembershipworks · membershipworks · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,7	—	%0,2	27 Eki 2026
21İzleyin	CVE-2026-114120İstismar yok	SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Actionwpdeveloper · schedulepress · CWE-862 Erişim denetimi (IDOR)	Orta5,3	—	%0,2	21 Eki 2026

CVE-2026-127211
28İzleyin
MultiVendorX WordPress Plugin < 5.0.22 Broken Access Control via stores REST Route
YüksekCVSS 7,1İstismar yok
- Erişim denetimi (IDOR)
multivendorx · multivendorx – woocommerce multivendor marketplace ai powered solutionsBugün
CVE-2026-127207
21İzleyin
Sendcloud for WooCommerce 1.0.41 Missing Authorization via AJAX Actions
OrtaCVSS 5,3İstismar yok
- Erişim denetimi (IDOR)
- CSRF
sendcloud · sendcloud for woocommerce: automated shipping, branded tracking & returnsBugün
CVE-2026-127206
27İzleyin
Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA Bypass
OrtaCVSS 6,9İstismar yok
- Kimlik doğrulamasız
hookandhook · image captcha for contact form 7 and wpforms by hookandhook (dsgvo/gdpr)Bugün
CVE-2026-127204
34İzleyin
WooCommerce PayPal Pro Payment Gateway < 4.1.1 Payment Bypass via pp_capture_order
YüksekCVSS 8,7İstismar yok
- Kimlik doğrulamasız
wp.insider · payment gateway for paypal pro, paypal checkout & subscriptions for woocommerce1 gün önce
CVE-2026-124018
21İzleyin
Gutenverse Form WordPress Plugin < 3.2.2 CSV Formula Injection via Form Submission
OrtaCVSS 5,3İstismar yok
- Girişsiz RCE
jegstudio · gutenverse form – contact form builder, block form & booking form1 gün önce
CVE-2026-125745
9İzleyin
WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAX
DüşükCVSS 2,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
madalinungureanu · custom post types and custom fields creator – wck3 gün önce
CVE-2026-119751
27İzleyin
Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blocks
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
keywordrush · content egg – affiliate product importer & price comparison5 Kas 2026
CVE-2026-122220
36İzleyin
WPO365 LOGIN before 45.2 SAML Replay Protection Bypass
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wpo365 · wpo365 | seamless wordpress + microsoft integration (wpo365 | login)4 Kas 2026
CVE-2026-121993
21İzleyin
wePOS before 2.0.3 Missing Authorization via payment/process Endpoint
OrtaCVSS 5,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wedevs · wepos – point of sale (pos) for woocommerce & dokan4 Kas 2026
CVE-2026-119745
21İzleyin
Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download
OrtaCVSS 5,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
multivendorx · multivendorx4 Kas 2026
CVE-2026-121970
25İzleyin
Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
wphostingdev · pay with vipps and mobilepay for woocommerce4 Kas 2026
CVE-2026-112355
34İzleyin
MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
membershipworks · membershipworks27 Eki 2026
CVE-2026-114120
21İzleyin
SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
OrtaCVSS 5,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wpdeveloper · schedulepress21 Eki 2026