İçeriğe atla
Noroxi

ISMAILSHADOW

15 kredili kayıt · son 12 ayda 10 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-2374
    28İzleyin

    Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF

    YüksekCVSS 7,2İstismar yokEPSS %0

    robertpeake · login no captcha recaptcha28 May 2026

  • CVE-2026-4347
    32İzleyin

    MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir

    YüksekCVSS 8,1İstismar yokEPSS %1

    inc2734 · mw wp form2 Nis 2026

  • CVE-2026-3584
    40Planlayın

    Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    wpchill · kali forms — contact form & drag-and-drop builder20 Mar 2026

  • CVE-2025-14799
    26İzleyin

    Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling

    OrtaCVSS 6,5İstismar yokEPSS %0

    neeraj_slit · brevo – email, sms, web push, chat, and more.18 Şub 2026

  • CVE-2026-1927
    21İzleyin

    GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored C

    OrtaCVSS 5,4İstismar yokEPSS %0

    wpsoul · greenshift – animation and page builder blocks5 Şub 2026

  • CVE-2025-14437
    31İzleyin

    Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    wpmudev · hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdn18 Ara 2025

  • CVE-2025-13645
    28İzleyin

    Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion

    YüksekCVSS 7,2İstismar yokEPSS %1

    wpchill · modula image gallery2 Ara 2025

  • CVE-2025-13536
    35İzleyin

    Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'

    YüksekCVSS 8,8İstismar yokEPSS %1

    blubrry · powerpress podcasting plugin by blubrry27 Kas 2025

  • CVE-2025-12844
    28İzleyin

    AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization

    YüksekCVSS 7,1İstismar yokEPSS %0

    tigroumeow · ai engine – the chatbot, ai framework & mcp for wordpress13 Kas 2025

  • CVE-2025-9334
    35İzleyin

    Better Find and Replace <= 1.7.7 - Authenticated (Subscriber+) Limited Code Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    codesolz · better find and replace – ai-powered suggestions8 Kas 2025

  • CVE-2025-6189
    26İzleyin

    Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta_key Parameter

    OrtaCVSS 6,5İstismar yokEPSS %0

    arjunthakur · duplicate page and post10 Eyl 2025

  • CVE-2025-8268
    26İzleyin

    Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion

    OrtaCVSS 6,5İstismar yokEPSS %0

    tigroumeow · ai engine – the chatbot, ai framework & mcp for wordpress3 Eyl 2025

  • CVE-2025-7847
    35İzleyin

    AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    tigroumeow · ai engine31 Tem 2025

  • CVE-2025-7780
    26İzleyin

    AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions

    OrtaCVSS 6,5İstismar yokEPSS %1

    tigroumeow · ai engine – the chatbot, ai framework & mcp for wordpress24 Tem 2025

  • CVE-2025-7367
    25İzleyin

    Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields

    OrtaCVSS 6,4İstismar yokEPSS %0

    wpchill · strong testimonials15 Tem 2025