İçeriğe atla
Noroxi

D.Sim

152 kredili kayıt · son 12 ayda 21 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2025-8444
    25İzleyin

    Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    wealcoder · animation addons for elementor – gsap motion elementor addons & website templates10 Haz 2026

  • CVE-2025-14149
    25İzleyin

    Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link

    OrtaCVSS 6,4İstismar yokEPSS %0

    xpro · xpro addons — 140+ widgets for elementor27 Şub 2026

  • CVE-2026-1216
    28İzleyin

    RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    rebelcode · rss aggregator – rss import, news feeds, feed to post, and autoblogging17 Şub 2026

  • CVE-2025-14274
    21İzleyin

    Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

    OrtaCVSS 5,4İstismar yokEPSS %0

    unitecms · unlimited elements for elementor3 Şub 2026

  • CVE-2025-9082
    25İzleyin

    WPBITS Addons For Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    wpbits · wpbits addons for elementor page builder28 Oca 2026

  • CVE-2025-15283
    28İzleyin

    Name Directory <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters

    YüksekCVSS 7,2İstismar yokEPSS %0

    jeroenpeters1986 · name directory14 Oca 2026

  • CVE-2025-15266
    28İzleyin

    GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    ahmadgb · geekybot — generate ai content without prompt, chatbot and lead generation14 Oca 2026

  • CVE-2025-14635
    25İzleyin

    Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    OrtaCVSS 6,4İstismar yokEPSS %0

    thehappymonster · happy addons for elementor23 Ara 2025

  • CVE-2025-11496
    24İzleyin

    Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    rustaurius · five star restaurant reservations – wordpress booking plugin20 Ara 2025

  • CVE-2025-14154
    24İzleyin

    Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    wordplus · better messages – live chat, chat rooms, real-time messaging & private messages17 Ara 2025

  • CVE-2025-8780
    25İzleyin

    Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    livemesh · livemesh siteorigin widgets13 Ara 2025

  • CVE-2025-8779
    25İzleyin

    All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    shamsbd71 · all-in-one addons for elementor – widgetkit13 Ara 2025

  • CVE-2025-8687
    25İzleyin

    Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    themelooks · enter addons – ultimate template builder for elementor13 Ara 2025

  • CVE-2025-8199
    25İzleyin

    MarqueeAddons <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Marquee Widget

    OrtaCVSS 6,4İstismar yokEPSS %0

    debuggersstudio · marquee addons for elementor – essential motion widgets & templates13 Ara 2025

  • CVE-2025-8195
    25İzleyin

    JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    jetmonsters · jetwidgets for elementor13 Ara 2025

  • CVE-2025-7960
    25İzleyin

    King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    kingaddons · king addons for elementor – 80+ elementor widgets, 4 000+ elementor templates, woocommerce, mega menu, popup builder13 Ara 2025

  • CVE-2025-13196
    21İzleyin

    Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget

    OrtaCVSS 5,4İstismar yokEPSS %0

    bdthemes · element pack – widgets, templates & addons for elementor18 Kas 2025

  • CVE-2025-8609
    25İzleyin

    RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute

    OrtaCVSS 6,4İstismar yokEPSS %0

    rometheme · rtmkit18 Kas 2025

  • CVE-2025-8605
    25İzleyin

    Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block

    OrtaCVSS 6,4İstismar yokEPSS %0

    codeyatri · gutenify – visual site builder blocks & site templates.18 Kas 2025

  • CVE-2025-8666
    25İzleyin

    Testimonial Carousel For Elementor <= 11.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    OrtaCVSS 6,4İstismar yokEPSS %0

    uapp · testimonial carousel for elementor25 Eki 2025

  • CVE-2025-8588
    25İzleyin

    Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    publishpress · publishpress blocks – block controls, block visibility, block permissions25 Eki 2025

  • CVE-2025-9030
    21İzleyin

    Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    maneshtimilsina · majestic before after image4 Eki 2025

  • CVE-2025-8726
    21İzleyin

    WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

    OrtaCVSS 5,4İstismar yokEPSS %0

    opajaap · wp photo album plus4 Eki 2025

  • CVE-2025-9206
    25İzleyin

    Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    mekshq · meks easy maps3 Eki 2025

  • CVE-2025-9204
    25İzleyin

    X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field

    OrtaCVSS 6,4İstismar yokEPSS %0

    pencilwp · x addons for elementor3 Eki 2025