Mutantgun
12 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
14İzleyin | CVE-2026-108686İstismar yok | WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosureunknown · wp post author · CWE-200 | Düşük3,7 | — | %0,2 | 29 Eki 2026 |
14İzleyin | CVE-2026-108685İstismar yok | WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fieldsunknown · wp post author · CWE-862 | Düşük3,7 | — | %0,2 | 29 Eki 2026 |
21İzleyin | CVE-2026-100142İstismar yok | FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDORunknown · fluentcart a new era of ecommerce · CWE-639 | Orta5,3 | — | %0,2 | 22 Eki 2026 |
21İzleyin | CVE-2026-92437İstismar yok | Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletionunknown · mailchimp for woocommerce · CWE-862 | Orta5,3 | — | %0,2 | 3 Eki 2026 |
30İzleyin | CVE-2026-93428İstismar yok | Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypassultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership plugin · CWE-862 | Yüksek7,5 | — | %0,5 | 3 Eki 2026 |
26İzleyin | CVE-2026-100143İstismar yok | FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Emailunknown · fluentcart a new era of ecommerce · CWE-287 | Orta6,5 | — | %0,2 | 30 Eyl 2026 |
30İzleyin | CVE-2026-85081İstismar yok | Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypassunknown · file manager · CWE-79 | Yüksek7,5 | — | %0,2 | 26 Eyl 2026 |
27İzleyin | CVE-2026-80338İstismar yok | CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handlerunknown · cmb2 · CWE-862 | Orta6,8 | — | %0,1 | 24 Eyl 2026 |
24İzleyin | CVE-2026-19985İstismar yok | Relevanssi <= 4.28.1 - Reflected Cross-Site Scriptingcomesio · relevanssi – a better search · CWE-79 | Orta6,1 | — | %0,4 | 11 Eyl 2026 |
30İzleyin | CVE-2026-18056İstismar yok | HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticatorhivepress · hivepress authentication · CWE-287 | Yüksek7,5 | — | %0,5 | 5 Eyl 2026 |
27İzleyin | CVE-2026-82846İstismar yok | Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fieldsunknown · masteriyo lms · CWE-79 | Orta6,8 | — | %0,4 | 5 Eyl 2026 |
35İzleyin | CVE-2026-77826İstismar yok | RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validationunknown · registrationmagic · CWE-287 | Yüksek8,8 | — | %0,4 | 5 Eyl 2026 |
- CVE-2026-10868614İzleyin
WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure
DüşükCVSS 3,7İstismar yokEPSS %0unknown · wp post author29 Eki 2026
- CVE-2026-10868514İzleyin
WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields
DüşükCVSS 3,7İstismar yokEPSS %0unknown · wp post author29 Eki 2026
- CVE-2026-10014221İzleyin
FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR
OrtaCVSS 5,3İstismar yokEPSS %0unknown · fluentcart a new era of ecommerce22 Eki 2026
- CVE-2026-9243721İzleyin
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
OrtaCVSS 5,3İstismar yokEPSS %0unknown · mailchimp for woocommerce3 Eki 2026
- CVE-2026-9342830İzleyin
Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass
YüksekCVSS 7,5İstismar yokEPSS %0ultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership plugin3 Eki 2026
- CVE-2026-10014326İzleyin
FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email
OrtaCVSS 6,5İstismar yokEPSS %0unknown · fluentcart a new era of ecommerce30 Eyl 2026
- CVE-2026-8508130İzleyin
Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
YüksekCVSS 7,5İstismar yokEPSS %0unknown · file manager26 Eyl 2026
- CVE-2026-8033827İzleyin
CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler
OrtaCVSS 6,8İstismar yokEPSS %0unknown · cmb224 Eyl 2026
- CVE-2026-1998524İzleyin
Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0comesio · relevanssi – a better search11 Eyl 2026
- CVE-2026-1805630İzleyin
HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
YüksekCVSS 7,5İstismar yokEPSS %0hivepress · hivepress authentication5 Eyl 2026
- CVE-2026-8284627İzleyin
Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields
OrtaCVSS 6,8İstismar yokEPSS %0unknown · masteriyo lms5 Eyl 2026
- CVE-2026-7782635İzleyin
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
YüksekCVSS 8,8İstismar yokEPSS %0unknown · registrationmagic5 Eyl 2026