İçeriğe atla
Noroxi

Kuba

19 kredili kayıt · son 12 ayda 19 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-96558
    28İzleyin

    Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    expresstech · quiz and survey master (qsm) – quiz maker & survey maker1 gün önce

  • CVE-2026-104006
    14İzleyin

    SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Chec

    DüşükCVSS 3,7İstismar yokEPSS %0

    softaculous · speedycache – cache, optimization, performance1 gün önce

  • CVE-2026-103998
    24İzleyin

    Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key

    OrtaCVSS 6,1İstismar yokEPSS %0

    10web · form maker by 10web – mobile-friendly drag & drop contact form builder2 gün önce

  • CVE-2026-96743
    25İzleyin

    Table Field Add-on for ACF and SCF <= 1.4.1-RC2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Field Value

    OrtaCVSS 6,4İstismar yokEPSS %0

    jonua · table field add-on for acf and scf2 gün önce

  • CVE-2026-97341
    28İzleyin

    Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header

    YüksekCVSS 7,2İstismar yokEPSS %0

    wp-buy · visitor traffic real time statistics3 Eki 2026

  • CVE-2026-97337
    30İzleyin

    Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpinsider-1 · simple membership3 Eki 2026

  • CVE-2026-103888
    24İzleyin

    WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpclever · wpc smart quick view for woocommerce3 Eki 2026

  • CVE-2026-100152
    26İzleyin

    All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query Parameter

    OrtaCVSS 6,5İstismar yokEPSS %0

    smub · all in one seo – ai seo plugin to boost seo rankings & traffic (schema, local seo, sitemap & seo insights)3 Eki 2026

  • CVE-2026-96567
    28İzleyin

    MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)

    YüksekCVSS 7,2İstismar yokEPSS %0

    websoudan · mw wp form2 Eki 2026

  • CVE-2026-102772
    28İzleyin

    CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field

    YüksekCVSS 7,2İstismar yokEPSS %0

    jtsternberg · cmb22 Eki 2026

  • CVE-2026-92244
    28İzleyin

    PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpovernight · pdf invoices & packing slips for woocommerce1 Eki 2026

  • CVE-2026-89427
    24İzleyin

    Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    spacetime · ad inserter – ad manager & adsense ads1 Eki 2026

  • CVE-2026-89424
    25İzleyin

    Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter

    OrtaCVSS 6,4İstismar yokEPSS %0

    inisev · duplicate post1 Eki 2026

  • CVE-2026-92229
    36İzleyin

    Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    wpmudev · forminator forms – contact form, payment form & custom form builder18 Eyl 2026

  • CVE-2026-92554
    24İzleyin

    ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

    OrtaCVSS 6,1İstismar yokEPSS %0

    devitemsllc · shoplentor – all-in-one woocommerce growth & store enhancement plugin18 Eyl 2026

  • CVE-2026-84960
    24İzleyin

    WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    cbutlerjr · wp-members membership plugin11 Eyl 2026

  • CVE-2026-77150
    24İzleyin

    Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    unitecms · unlimited elements for elementor11 Eyl 2026

  • CVE-2026-18562
    24İzleyin

    HUSKY <= 1.4.3 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    realmag777 · husky – products filter for woocommerce professional11 Eyl 2026

  • CVE-2026-83627
    39İzleyin

    Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    wpmudev · hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdn5 Eyl 2026