LionTree
9 kredili kayıt · son 12 ayda 9 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2025-12473İstismar yok | RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameterrometheme · rtmkit · CWE-79 | Orta6,1 | — | %0,2 | 10 Mar 2026 |
23İzleyin | CVE-2025-12002İstismar yok | Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversalawesome motive · youtube feed pro · CWE-22 | Orta5,9 | — | %0,4 | 16 Oca 2026 |
32İzleyin | CVE-2025-14800İstismar yok | Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_uploadthemeisle · redirection for contact form 7 · CWE-434 | Yüksek8,1 | — | %0,4 | 21 Ara 2025 |
24İzleyin | CVE-2025-12471İstismar yok | Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scriptingnerdpressteam · hubbub lite – fast, free social sharing and follow buttons · CWE-79 | Orta6,1 | — | %0,2 | 6 Kas 2025 |
17İzleyin | CVE-2025-12560İstismar yok | Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_urlpr-gateway · blog2social: social media auto post & scheduler · CWE-918 | Orta4,3 | — | %0,2 | 6 Kas 2025 |
32İzleyin | CVE-2025-12497İstismar yok | Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]averta · premium portfolio features for phlox theme · CWE-98 | Yüksek8,1 | — | %0,6 | 5 Kas 2025 |
30İzleyin | CVE-2025-11735İstismar yok | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameterrealmag777 · husky – products filter professional for woocommerce · CWE-89 | Yüksek7,5 | — | %0,3 | 28 Eki 2025 |
20İzleyin | CVE-2025-11536İstismar yok | Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgerybdthemes · element pack – widgets, templates & addons for elementor · CWE-918 | Orta5,0 | — | %0,2 | 20 Eki 2025 |
30İzleyin | CVE-2025-8877İstismar yok | AffiliateWP <= 2.28.2 - Unauthenticated SQL Injectionaffiliatewp · affiliatewp · CWE-89 | Yüksek7,5 | — | %0,4 | 30 Eyl 2025 |
- CVE-2025-1247324İzleyin
RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
OrtaCVSS 6,1İstismar yokEPSS %0rometheme · rtmkit10 Mar 2026
- CVE-2025-1200223İzleyin
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
OrtaCVSS 5,9İstismar yokEPSS %0awesome motive · youtube feed pro16 Oca 2026
- CVE-2025-1480032İzleyin
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
YüksekCVSS 8,1İstismar yokEPSS %0themeisle · redirection for contact form 721 Ara 2025
- CVE-2025-1247124İzleyin
Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0nerdpressteam · hubbub lite – fast, free social sharing and follow buttons6 Kas 2025
- CVE-2025-1256017İzleyin
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
OrtaCVSS 4,3İstismar yokEPSS %0pr-gateway · blog2social: social media auto post & scheduler6 Kas 2025
- CVE-2025-1249732İzleyin
Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
YüksekCVSS 8,1İstismar yokEPSS %1averta · premium portfolio features for phlox theme5 Kas 2025
- CVE-2025-1173530İzleyin
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
YüksekCVSS 7,5İstismar yokEPSS %0realmag777 · husky – products filter professional for woocommerce28 Eki 2025
- CVE-2025-1153620İzleyin
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
OrtaCVSS 5,0İstismar yokEPSS %0bdthemes · element pack – widgets, templates & addons for elementor20 Eki 2025
- CVE-2025-887730İzleyin
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0affiliatewp · affiliatewp30 Eyl 2025