D01EXPLOIT OFFICIAL
10 kredili kayıt · son 12 ayda 8 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2025-15691İstismar yok | WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Formsunknown · wpfunnels · CWE-863 | Orta5,3 | — | %0,2 | 4 Eyl 2026 |
34İzleyin | CVE-2025-15662İstismar yok | Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgeryunknown · printcart web to print product designer for woocommerce · CWE-918 | Yüksek8,6 | — | %0,4 | 27 Tem 2026 |
21İzleyin | CVE-2025-10268İstismar yok | Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversalunknown · printcart web to print product designer for woocommerce · CWE-22 | Orta5,3 | — | %0,4 | 26 Haz 2026 |
17İzleyin | CVE-2025-13408İstismar yok | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connectionfoxtheme · foxtool all-in-one: contact chat button, custom login, media optimize images · CWE-352 | Orta4,3 | — | %0,2 | 12 Ara 2025 |
39İzleyin | CVE-2025-12158İstismar yok | Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationtanvirahmed1984 · simple user capabilities · CWE-862 | Kritik9,8 | — | %0,5 | 4 Kas 2025 |
21İzleyin | CVE-2025-12157İstismar yok | Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Resettanvirahmed1984 · simple user capabilities · CWE-862 | Orta5,3 | — | %0,3 | 4 Kas 2025 |
21İzleyin | CVE-2025-11881İstismar yok | AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposurescottopolis · apppresser – mobile app framework · CWE-862 | Orta5,3 | — | %0,3 | 30 Eki 2025 |
21İzleyin | CVE-2025-10486İstismar yok | Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log Filesteadycontent · content writer · CWE-532 | Orta5,3 | — | %0,3 | 15 Eki 2025 |
21İzleyin | CVE-2025-10212İstismar yok | SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposuresitealert · sitealert (formerly wp health) · CWE-862 | Orta5,3 | — | %0,4 | 3 Eki 2025 |
16İzleyin | CVE-2025-10735İstismar yok | Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgerybplugins · block for mailchimp – add email subscription forms and collect leads · CWE-918 | Orta4,0 | — | %0,3 | 1 Eki 2025 |
- CVE-2025-1569121İzleyin
WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms
OrtaCVSS 5,3İstismar yokEPSS %0unknown · wpfunnels4 Eyl 2026
- CVE-2025-1566234İzleyin
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
YüksekCVSS 8,6İstismar yokEPSS %0unknown · printcart web to print product designer for woocommerce27 Tem 2026
- CVE-2025-1026821İzleyin
Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal
OrtaCVSS 5,3İstismar yokEPSS %0unknown · printcart web to print product designer for woocommerce26 Haz 2026
- CVE-2025-1340817İzleyin
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connection
OrtaCVSS 4,3İstismar yokEPSS %0foxtheme · foxtool all-in-one: contact chat button, custom login, media optimize images12 Ara 2025
- CVE-2025-1215839İzleyin
Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %0tanvirahmed1984 · simple user capabilities4 Kas 2025
- CVE-2025-1215721İzleyin
Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset
OrtaCVSS 5,3İstismar yokEPSS %0tanvirahmed1984 · simple user capabilities4 Kas 2025
- CVE-2025-1188121İzleyin
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %0scottopolis · apppresser – mobile app framework30 Eki 2025
- CVE-2025-1048621İzleyin
Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File
OrtaCVSS 5,3İstismar yokEPSS %0steadycontent · content writer15 Eki 2025
- CVE-2025-1021221İzleyin
SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %0sitealert · sitealert (formerly wp health)3 Eki 2025
- CVE-2025-1073516İzleyin
Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
OrtaCVSS 4,0İstismar yokEPSS %0bplugins · block for mailchimp – add email subscription forms and collect leads1 Eki 2025