Ivan Cese

31 kredili kayıt · son 12 ayda 27 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2025-14868İstismar yok	Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletionshahinurislam · career section · CWE-22 Kimlik doğrulamasız Yol geçişi CSRF	Yüksek8,8	—	%0,4	16 Nis 2026
26İzleyin	CVE-2025-15477İstismar yok	The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributessimonfairbairn · the bucketlister · CWE-89 SQL enjeksiyonu	Orta6,5	—	%0,2	7 Şub 2026
17İzleyin	CVE-2025-15476İstismar yok	The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modificationsimonfairbairn · the bucketlister · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	7 Şub 2026
25İzleyin	CVE-2026-1909İstismar yok	WaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attributex-raym · wavesurfer-wp · CWE-79 XSS	Orta6,4	—	%0,2	6 Şub 2026
28İzleyin	CVE-2025-14613İstismar yok	GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attributedaschmi · getcontentfromurl · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,2	—	%0,3	14 Oca 2026
21İzleyin	CVE-2025-14464İstismar yok	PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentialskiwicommerce · pdf resume parser · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,3	—	%0,3	14 Oca 2026
21İzleyin	CVE-2025-13694İstismar yok	AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Headeraaextensions · aa block country · CWE-348 Kimlik doğrulamasız	Orta5,3	—	%0,2	7 Oca 2026
21İzleyin	CVE-2025-14539İstismar yok	Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameterrang501 · shortcode ajax · CWE-94 RCE	Orta5,4	—	%0,2	13 Ara 2025
18İzleyin	CVE-2025-14451İstismar yok	Solutions Ad Manager <= 1.0.0 - Unauthenticated Open Redirect via 'sam-redirect-to' Parametersolutionsbysteve · solutions ad manager · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta4,7	—	%0,3	13 Ara 2025
26İzleyin	CVE-2025-12960İstismar yok	Simple CSV Table <= 1.0.1 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Readiworks · simple csv table · CWE-22 Yol geçişi	Orta6,5	—	%0,6	12 Ara 2025
32İzleyin	CVE-2025-14044İstismar yok	Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookierodgerholl · visitor logic lite · CWE-502 Kimlik doğrulamasız Deserializasyon	Yüksek8,1	—	%0,5	12 Ara 2025
26İzleyin	CVE-2025-13070İstismar yok	CSV to SortTable <= 4.2 - Contributor+ LFIunknown · csv to sorttable · CWE-22 Yol geçişi	Orta6,6	—	%0,4	9 Ara 2025
17İzleyin	CVE-2025-13629İstismar yok	WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Updatexbenx · wp landing page · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	6 Ara 2025
17İzleyin	CVE-2025-12186İstismar yok	Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scriptingmichael_j_reid · weekly planner · CWE-79 XSS	Orta4,4	—	%0,2	5 Ara 2025
35İzleyin	CVE-2025-12879İstismar yok	User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creationvinoth06 · user generator and importer · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,1	5 Ara 2025
17İzleyin	CVE-2025-12185İstismar yok	StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scriptingera404 · stafflist · CWE-79 XSS	Orta4,4	—	%0,2	27 Kas 2025
28İzleyin	CVE-2025-13376İstismar yok	ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Uploadov3rkll · projectlist · CWE-434 RCE Dosya yükleme	Yüksek7,2	—	%0,6	25 Kas 2025
19İzleyin	CVE-2025-13370İstismar yok	ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameterov3rkll · projectlist · CWE-89 SQL enjeksiyonu	Orta4,9	—	%0,3	25 Kas 2025
26İzleyin	CVE-2025-13133İstismar yok	Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injectionvaniivan · simple user import export · CWE-1236	Orta6,6	—	%0,2	18 Kas 2025
25İzleyin	CVE-2025-12962İstismar yok	Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcodewillbontrager · local syndication · CWE-918 SSRF	Orta6,4	—	%0,2	18 Kas 2025
17İzleyin	CVE-2025-12961İstismar yok	Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modificationarkadiykilesso · download panel (biggiko team) · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,2	18 Kas 2025
17İzleyin	CVE-2025-12827İstismar yok	Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Updatedenishua · top friends · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	18 Kas 2025
25İzleyin	CVE-2025-12823İstismar yok	CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingsscovil · csv to sorttable · CWE-79 XSS	Orta6,4	—	%0,1	18 Kas 2025
17İzleyin	CVE-2025-12665İstismar yok	Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletionlovelightplugins · ninja countdown \| fastest countdown builder · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	11 Kas 2025
22İzleyin	CVE-2025-12632İstismar yok	RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scriptingloveless · randomquotr · CWE-79 XSS	Orta5,5	—	%0,2	11 Kas 2025

CVE-2025-14868
35İzleyin
Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
- CSRF
shahinurislam · career section16 Nis 2026
CVE-2025-15477
26İzleyin
The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes
OrtaCVSS 6,5İstismar yokEPSS %0
- SQL enjeksiyonu
simonfairbairn · the bucketlister7 Şub 2026
CVE-2025-15476
17İzleyin
The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
simonfairbairn · the bucketlister7 Şub 2026
CVE-2026-1909
25İzleyin
WaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
x-raym · wavesurfer-wp6 Şub 2026
CVE-2025-14613
28İzleyin
GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute
YüksekCVSS 7,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
daschmi · getcontentfromurl14 Oca 2026
CVE-2025-14464
21İzleyin
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
kiwicommerce · pdf resume parser14 Oca 2026
CVE-2025-13694
21İzleyin
AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
aaextensions · aa block country7 Oca 2026
CVE-2025-14539
21İzleyin
Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
rang501 · shortcode ajax13 Ara 2025
CVE-2025-14451
18İzleyin
Solutions Ad Manager <= 1.0.0 - Unauthenticated Open Redirect via 'sam-redirect-to' Parameter
OrtaCVSS 4,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
solutionsbysteve · solutions ad manager13 Ara 2025
CVE-2025-12960
26İzleyin
Simple CSV Table <= 1.0.1 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Read
OrtaCVSS 6,5İstismar yokEPSS %0
- Yol geçişi
iworks · simple csv table12 Ara 2025
CVE-2025-14044
32İzleyin
Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
rodgerholl · visitor logic lite12 Ara 2025
CVE-2025-13070
26İzleyin
CSV to SortTable <= 4.2 - Contributor+ LFI
OrtaCVSS 6,6İstismar yokEPSS %0
- Yol geçişi
unknown · csv to sorttable9 Ara 2025
CVE-2025-13629
17İzleyin
WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Update
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
xbenx · wp landing page6 Ara 2025
CVE-2025-12186
17İzleyin
Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,4İstismar yokEPSS %0
- XSS
michael_j_reid · weekly planner5 Ara 2025
CVE-2025-12879
35İzleyin
User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creation
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
vinoth06 · user generator and importer5 Ara 2025
CVE-2025-12185
17İzleyin
StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,4İstismar yokEPSS %0
- XSS
era404 · stafflist27 Kas 2025
CVE-2025-13376
28İzleyin
ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Dosya yükleme
ov3rkll · projectlist25 Kas 2025
CVE-2025-13370
19İzleyin
ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter
OrtaCVSS 4,9İstismar yokEPSS %0
- SQL enjeksiyonu
ov3rkll · projectlist25 Kas 2025
CVE-2025-13133
26İzleyin
Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injection
OrtaCVSS 6,6İstismar yokEPSS %0
vaniivan · simple user import export18 Kas 2025
CVE-2025-12962
25İzleyin
Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
OrtaCVSS 6,4İstismar yokEPSS %0
- SSRF
willbontrager · local syndication18 Kas 2025
CVE-2025-12961
17İzleyin
Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
arkadiykilesso · download panel (biggiko team)18 Kas 2025
CVE-2025-12827
17İzleyin
Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
denishua · top friends18 Kas 2025
CVE-2025-12823
25İzleyin
CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
sscovil · csv to sorttable18 Kas 2025
CVE-2025-12665
17İzleyin
Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
lovelightplugins · ninja countdown | fastest countdown builder11 Kas 2025
CVE-2025-12632
22İzleyin
RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 5,5İstismar yokEPSS %0
- XSS
loveless · randomquotr11 Kas 2025