luc
Patchstack
25 kredili kayıt · son 12 ayda 17 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-32556İstismar yok | WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilitypixelyoursite professional · boost · CWE-79 | Yüksek7,1 | — | %0,3 | 24 Ağu 2026 |
37İzleyin | CVE-2026-32555İstismar yok | WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerabilitypixelyoursite professional · boost · CWE-89 | Kritik9,3 | — | %0,4 | 24 Ağu 2026 |
17İzleyin | CVE-2026-66634İstismar yok | WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerabilitypantherius · modal survey · CWE-639 | Orta4,3 | — | %0,3 | 18 Ağu 2026 |
26İzleyin | CVE-2026-73340İstismar yok | WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerabilityfifu.app · featured image from url · CWE-79 | Orta6,5 | — | %0,2 | 13 Ağu 2026 |
28İzleyin | CVE-2026-28158İstismar yok | WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerabilitylasso analytics, inc. · do lasso · CWE-79 | Yüksek7,1 | — | %0,3 | 13 Ağu 2026 |
30İzleyin | CVE-2026-28157İstismar yok | WordPress Do Lasso plugin <= 358 - Path Traversal vulnerabilitylasso analytics, inc. · do lasso · CWE-35 | Yüksek7,5 | — | %0,4 | 13 Ağu 2026 |
34İzleyin | CVE-2026-28156İstismar yok | WordPress Do Lasso plugin <= 358 - SQL Injection vulnerabilitylasso analytics, inc. · do lasso · CWE-89 | Yüksek8,5 | — | %0,4 | 13 Ağu 2026 |
26İzleyin | CVE-2026-28155İstismar yok | WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerabilitylasso analytics, inc. · do lasso · CWE-639 | Orta6,5 | — | %0,3 | 13 Ağu 2026 |
28İzleyin | CVE-2026-65442Kavram kanıtı | WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerabilitysubtle web inc · formcraft · CWE-918 | Yüksek7,2 | — | %0,6 | 27 Tem 2026 |
28İzleyin | CVE-2026-65441İstismar yok | WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilitynexcess · givewp · CWE-79 | Yüksek7,1 | — | %0,3 | 27 Tem 2026 |
28İzleyin | CVE-2026-61953İstismar yok | WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityquantumcloud · simple link directory pro · CWE-918 | Yüksek7,2 | — | %0,3 | 27 Tem 2026 |
26İzleyin | CVE-2026-65433İstismar yok | WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerabilitythemewant · rt mega menu – mega menu builder for elementor & gutenberg · CWE-862 | Orta6,5 | — | %0,3 | 27 Tem 2026 |
26İzleyin | CVE-2026-65528İstismar yok | WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilitybannersky · bsk pdf manager · CWE-79 | Orta6,5 | — | %0,2 | 23 Tem 2026 |
21İzleyin | CVE-2026-61981İstismar yok | WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerabilityquantumcloud · simple link directory pro · CWE-352 | Orta5,4 | — | %0,1 | 23 Tem 2026 |
32İzleyin | CVE-2026-39598İstismar yok | WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerabilitykodezen llc · academy lms pro · CWE-434 | Yüksek8,0 | — | %0,4 | 17 Haz 2026 |
30İzleyin | CVE-2026-34888İstismar yok | WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerabilitybricksforge · bricksforge · CWE-201 | Yüksek7,5 | — | %0,4 | 17 Haz 2026 |
39İzleyin | CVE-2026-27983İstismar yok | WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerabilitydesignthemes · lms elementor pro · CWE-266 | Kritik9,8 | — | %0,5 | 5 Mar 2026 |
39İzleyin | CVE-2024-32444Kavram kanıtı | WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerabilityinspirythemes · realhomes · CWE-266 | Kritik9,8 | — | %0,7 | 3 Eyl 2025 |
40Planlayın | CVE-2025-26927İstismar yok | WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerabilityliquidthemes · ai hub · CWE-434 | Kritik10,0 | — | %0,5 | 15 Nis 2025 |
28İzleyin | CVE-2025-31389İstismar yok | WordPress Sequel plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerabilityintrovoke inc. dba sequel.io · sequel · CWE-79 | Yüksek7,1 | — | %0,2 | 4 Nis 2025 |
26İzleyin | CVE-2025-26924İstismar yok | WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerabilitycolabrio · ohio extra · CWE-94 | Orta6,5 | — | %0,3 | 15 Mar 2025 |
39İzleyin | CVE-2024-51888İstismar yok | WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerabilityfavethemes · homey login register · CWE-266 | Kritik9,8 | — | %0,4 | 21 Oca 2025 |
39İzleyin | CVE-2024-32555İstismar yok | WordPress Easy Real Estate plugin <= 2.2.6 - Privilege Escalation vulnerabilityinspirythemes · easy real estate · CWE-266 | Kritik9,8 | — | %0,6 | 21 Oca 2025 |
39İzleyin | CVE-2024-43222İstismar yok | WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerabilityseventhqueen · sweet date · CWE-862 | Kritik9,8 | — | %0,8 | 9 Ara 2024 |
26İzleyin | CVE-2024-24888İstismar yok | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerabilitykadencewp · gutenberg blocks with ai · CWE-918 | Orta6,5 | — | %0,3 | 2 Nis 2024 |
- CVE-2026-3255628İzleyin
WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0pixelyoursite professional · boost24 Ağu 2026
- CVE-2026-3255537İzleyin
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0pixelyoursite professional · boost24 Ağu 2026
- CVE-2026-6663417İzleyin
WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0pantherius · modal survey18 Ağu 2026
- CVE-2026-7334026İzleyin
WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0fifu.app · featured image from url13 Ağu 2026
- CVE-2026-2815828İzleyin
WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0lasso analytics, inc. · do lasso13 Ağu 2026
- CVE-2026-2815730İzleyin
WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0lasso analytics, inc. · do lasso13 Ağu 2026
- CVE-2026-2815634İzleyin
WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0lasso analytics, inc. · do lasso13 Ağu 2026
- CVE-2026-2815526İzleyin
WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0lasso analytics, inc. · do lasso13 Ağu 2026
- CVE-2026-6544228İzleyin
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2Kavram kanıtıEPSS %1subtle web inc · formcraft27 Tem 2026
- CVE-2026-6544128İzleyin
WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0nexcess · givewp27 Tem 2026
- CVE-2026-6195328İzleyin
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0quantumcloud · simple link directory pro27 Tem 2026
- CVE-2026-6543326İzleyin
WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0themewant · rt mega menu – mega menu builder for elementor & gutenberg27 Tem 2026
- CVE-2026-6552826İzleyin
WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0bannersky · bsk pdf manager23 Tem 2026
- CVE-2026-6198121İzleyin
WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0quantumcloud · simple link directory pro23 Tem 2026
- CVE-2026-3959832İzleyin
WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerability
YüksekCVSS 8,0İstismar yokEPSS %0kodezen llc · academy lms pro17 Haz 2026
- CVE-2026-3488830İzleyin
WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0bricksforge · bricksforge17 Haz 2026
- CVE-2026-2798339İzleyin
WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0designthemes · lms elementor pro5 Mar 2026
- CVE-2024-3244439İzleyin
WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %1inspirythemes · realhomes3 Eyl 2025
- CVE-2025-2692740Planlayın
WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability
KritikCVSS 10,0İstismar yokEPSS %0liquidthemes · ai hub15 Nis 2025
- CVE-2025-3138928İzleyin
WordPress Sequel plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0introvoke inc. dba sequel.io · sequel4 Nis 2025
- CVE-2025-2692426İzleyin
WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0colabrio · ohio extra15 Mar 2025
- CVE-2024-5188839İzleyin
WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0favethemes · homey login register21 Oca 2025
- CVE-2024-3255539İzleyin
WordPress Easy Real Estate plugin <= 2.2.6 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1inspirythemes · easy real estate21 Oca 2025
- CVE-2024-4322239İzleyin
WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1seventhqueen · sweet date9 Ara 2024
- CVE-2024-2488826İzleyin
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0kadencewp · gutenberg blocks with ai2 Nis 2024