darkestmode

10 kredili kayıt · son 12 ayda 10 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
24İzleyin	CVE-2026-9280İstismar yok	Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Modespacetime · ad inserter – ad manager & adsense ads · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	6 Haz 2026
17İzleyin	CVE-2026-9008İstismar yok	Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributeswebvitaly · page-list · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	5 Haz 2026
17İzleyin	CVE-2026-7621İstismar yok	SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncatesmtp2go · smtp2go for wordpress – email made easy · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	28 May 2026
17İzleyin	CVE-2026-7615İstismar yok	Widget Context <= 1.3.3 - Cross-Site Request Forgery to Settings Update via 'wl' Parameterkasparsd · widget context · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	22 May 2026
25İzleyin	CVE-2026-4658İstismar yok	Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributeswpdevteam · gutenberg essential blocks – page builder for gutenberg blocks & patterns · CWE-79 XSS	Orta6,4	—	%0,4	2 May 2026
21İzleyin	CVE-2026-5234İstismar yok	LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice IDlatepoint · latepoint – calendar booking plugin for appointments and events · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,6	17 Nis 2026
21İzleyin	CVE-2026-4065İstismar yok	Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulationnextendweb · smart slider 3 · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,3	7 Nis 2026
21İzleyin	CVE-2026-4056İstismar yok	User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulationwpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,3	23 Mar 2026
17İzleyin	CVE-2026-4066İstismar yok	Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Searchinc2734 · smart custom fields · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	23 Mar 2026
17İzleyin	CVE-2026-4063İstismar yok	Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creationwpzoom · social icons widget & block – social media icons & share buttons · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	13 Mar 2026

CVE-2026-9280
24İzleyin
Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
spacetime · ad inserter – ad manager & adsense ads6 Haz 2026
CVE-2026-9008
17İzleyin
Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
webvitaly · page-list5 Haz 2026
CVE-2026-7621
17İzleyin
SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
smtp2go · smtp2go for wordpress – email made easy28 May 2026
CVE-2026-7615
17İzleyin
Widget Context <= 1.3.3 - Cross-Site Request Forgery to Settings Update via 'wl' Parameter
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
kasparsd · widget context22 May 2026
CVE-2026-4658
25İzleyin
Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
wpdevteam · gutenberg essential blocks – page builder for gutenberg blocks & patterns2 May 2026
CVE-2026-5234
21İzleyin
LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice ID
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
latepoint · latepoint – calendar booking plugin for appointments and events17 Nis 2026
CVE-2026-4065
21İzleyin
Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
nextendweb · smart slider 37 Nis 2026
CVE-2026-4056
21İzleyin
User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder23 Mar 2026
CVE-2026-4066
17İzleyin
Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
inc2734 · smart custom fields23 Mar 2026
CVE-2026-4063
17İzleyin
Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wpzoom · social icons widget & block – social media icons & share buttons13 Mar 2026