nudien
8 kredili kayıt · son 12 ayda 8 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-103900İstismar yok | WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameterdenishua · wpjam basic · CWE-269 | Yüksek8,1 | — | %0,4 | 4 gün önce |
39İzleyin | CVE-2026-19803Kavram kanıtı | Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameterprintcart · printcart store – web to print product designer for woocommerce · CWE-94 | Kritik9,8 | — | %0,9 | 5 gün önce |
25İzleyin | CVE-2026-97470İstismar yok | Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Rolethemefic · tourfic – ai powered travel booking, hotel booking & car rental · CWE-79 | Orta6,4 | — | %0,1 | 16 Eki 2026 |
30İzleyin | CVE-2026-19952Kavram kanıtı | Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tagshabti · frontend admin by dynamiapps · CWE-22 | Yüksek7,5 | — | %1,1 | 1 Eyl 2026 |
36İzleyin | CVE-2026-18855İstismar yok | Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameterjackdewey · link library · CWE-22 | Kritik9,1 | — | %1,3 | 15 Ağu 2026 |
32İzleyin | CVE-2026-7444İstismar yok | Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgerycornelraiu-1 · search analytics for wp · CWE-352 | Yüksek8,1 | — | %0,2 | 5 Ağu 2026 |
17İzleyin | CVE-2026-8678İstismar yok | MyParcel <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_optionrichardperdaan · myparcel · CWE-862 | Orta4,3 | — | %0,4 | 11 Tem 2026 |
17İzleyin | CVE-2026-4298İstismar yok | DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Resetmlfactory · dsgvo all in one for wp · CWE-862 | Orta4,3 | — | %0,3 | 9 Tem 2026 |
- CVE-2026-10390032İzleyin
WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter
YüksekCVSS 8,1İstismar yokEPSS %0denishua · wpjam basic4 gün önce
- CVE-2026-1980339İzleyin
Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %0printcart · printcart store – web to print product designer for woocommerce5 gün önce
- CVE-2026-9747025İzleyin
Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role
OrtaCVSS 6,4İstismar yokEPSS %0themefic · tourfic – ai powered travel booking, hotel booking & car rental16 Eki 2026
- CVE-2026-1995230İzleyin
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
YüksekCVSS 7,5Kavram kanıtıEPSS %1shabti · frontend admin by dynamiapps1 Eyl 2026
- CVE-2026-1885536İzleyin
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
KritikCVSS 9,1İstismar yokEPSS %1jackdewey · link library15 Ağu 2026
- CVE-2026-744432İzleyin
Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery
YüksekCVSS 8,1İstismar yokEPSS %0cornelraiu-1 · search analytics for wp5 Ağu 2026
- CVE-2026-867817İzleyin
MyParcel <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_option
OrtaCVSS 4,3İstismar yokEPSS %0richardperdaan · myparcel11 Tem 2026
- CVE-2026-429817İzleyin
DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
OrtaCVSS 4,3İstismar yokEPSS %0mlfactory · dsgvo all in one for wp9 Tem 2026