NosleeP++
7 kredili kayıt · son 12 ayda 7 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2025-13146İstismar yok | Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Executionsevenspark · dtx – dynamic text extension for contact form 7 · CWE-94 | Orta6,5 | — | %0,4 | 22 Tem 2026 |
21İzleyin | CVE-2025-13930İstismar yok | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletionquadlayers · checkout field manager (checkout manager) for woocommerce · CWE-862 | Orta5,3 | — | %0,4 | 19 Şub 2026 |
21İzleyin | CVE-2025-13864İstismar yok | Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletioncloudways · breeze cache · CWE-862 | Orta5,3 | — | %0,4 | 19 Şub 2026 |
21İzleyin | CVE-2025-13842İstismar yok | Breadcrumb NavXT <= 7.5.0 - Missing Authorization to Sensitive Information Exposuremtekk · breadcrumb navxt · CWE-639 | Orta5,3 | — | %0,4 | 19 Şub 2026 |
17İzleyin | CVE-2025-14384İstismar yok | All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token asmub · all in one seo – powerful seo plugin to boost seo rankings & increase traffic · CWE-862 | Orta4,3 | — | %0,2 | 16 Oca 2026 |
28İzleyin | CVE-2025-13592İstismar yok | Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcodemonetizemore · advanced ads – ad manager & adsense · CWE-94 | Yüksek7,2 | — | %0,8 | 29 Ara 2025 |
22İzleyin | CVE-2025-13993İstismar yok | MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scriptingmailerlite · mailerlite – signup forms (official) · CWE-79 | Orta5,5 | — | %0,3 | 12 Ara 2025 |
- CVE-2025-1314626İzleyin
Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution
OrtaCVSS 6,5İstismar yokEPSS %0sevenspark · dtx – dynamic text extension for contact form 722 Tem 2026
- CVE-2025-1393021İzleyin
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
OrtaCVSS 5,3İstismar yokEPSS %0quadlayers · checkout field manager (checkout manager) for woocommerce19 Şub 2026
- CVE-2025-1386421İzleyin
Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion
OrtaCVSS 5,3İstismar yokEPSS %0cloudways · breeze cache19 Şub 2026
- CVE-2025-1384221İzleyin
Breadcrumb NavXT <= 7.5.0 - Missing Authorization to Sensitive Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %0mtekk · breadcrumb navxt19 Şub 2026
- CVE-2025-1438417İzleyin
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token a
OrtaCVSS 4,3İstismar yokEPSS %0smub · all in one seo – powerful seo plugin to boost seo rankings & increase traffic16 Oca 2026
- CVE-2025-1359228İzleyin
Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode
YüksekCVSS 7,2İstismar yokEPSS %0monetizemore · advanced ads – ad manager & adsense29 Ara 2025
- CVE-2025-1399322İzleyin
MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
OrtaCVSS 5,5İstismar yokEPSS %0mailerlite · mailerlite – signup forms (official)12 Ara 2025