pb>sec
4 kredili kayıt · son 12 ayda 4 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-115807İstismar yok | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gcozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-269 | Yüksek7,1 | — | %0,2 | 24 Eki 2026 |
32İzleyin | CVE-2026-92713İstismar yok | Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameterwpchill · modula image gallery – photo grid & video gallery · CWE-862 | Yüksek8,1 | — | %0,3 | 25 Eyl 2026 |
25İzleyin | CVE-2026-92622İstismar yok | Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attributewpchill · strong testimonials · CWE-79 | Orta6,4 | — | %0,3 | 18 Eyl 2026 |
26İzleyin | CVE-2026-92714İstismar yok | Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parametercodename065 · download manager · CWE-639 | Orta6,5 | — | %0,4 | 18 Eyl 2026 |
- CVE-2026-11580728İzleyin
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via G
YüksekCVSS 7,1İstismar yokEPSS %0cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor24 Eki 2026
- CVE-2026-9271332İzleyin
Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter
YüksekCVSS 8,1İstismar yokEPSS %0wpchill · modula image gallery – photo grid & video gallery25 Eyl 2026
- CVE-2026-9262225İzleyin
Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
OrtaCVSS 6,4İstismar yokEPSS %0wpchill · strong testimonials18 Eyl 2026
- CVE-2026-9271426İzleyin
Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter
OrtaCVSS 6,5İstismar yokEPSS %0codename065 · download manager18 Eyl 2026