R3D
6 kredili kayıt · son 12 ayda 6 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
23İzleyin | CVE-2026-111464İstismar yok | WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Responseemrevona · wp fastest cache – wordpress cache plugin · CWE-524 | Orta5,9 | — | — | Bugün |
21İzleyin | CVE-2026-119166İstismar yok | Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameteruscnanbu · welcart e-commerce · CWE-287 | Orta5,3 | — | %0,2 | 3 gün önce |
30İzleyin | CVE-2026-119163İstismar yok | FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameterteamfunnelkit · funnelkit automations – email marketing automation and crm for wordpress & woocommerce · CWE-89 | Yüksek7,5 | — | %0,3 | 3 gün önce |
28İzleyin | CVE-2026-109224İstismar yok | SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Commentsurecart · surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & payments · CWE-79 | Yüksek7,2 | — | %0,2 | 16 Eki 2026 |
39İzleyin | CVE-2026-89079Kavram kanıtı | Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filterjfarthing84 · theme my login · CWE-269 | Kritik9,8 | — | %1,6 | 16 Eki 2026 |
32İzleyin | CVE-2026-104932İstismar yok | Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruptionjohnny5 · search regex · CWE-502 | Yüksek8,0 | — | %0,2 | 16 Eki 2026 |
21İzleyin | CVE-2026-103365İstismar yok | Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_detailsladela · online scheduling and appointment booking system – bookly · CWE-200 | Orta5,3 | — | %0,2 | 10 Eki 2026 |
- CVE-2026-11146423İzleyin
WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response
OrtaCVSS 5,9İstismar yokemrevona · wp fastest cache – wordpress cache pluginBugün
- CVE-2026-11916621İzleyin
Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter
OrtaCVSS 5,3İstismar yokEPSS %0uscnanbu · welcart e-commerce3 gün önce
- CVE-2026-11916330İzleyin
FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
YüksekCVSS 7,5İstismar yokEPSS %0teamfunnelkit · funnelkit automations – email marketing automation and crm for wordpress & woocommerce3 gün önce
- CVE-2026-10922428İzleyin
SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment
YüksekCVSS 7,2İstismar yokEPSS %0surecart · surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & payments16 Eki 2026
- CVE-2026-8907939İzleyin
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
KritikCVSS 9,8Kavram kanıtıEPSS %1jfarthing84 · theme my login16 Eki 2026
- CVE-2026-10493232İzleyin
Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption
YüksekCVSS 8,0İstismar yokEPSS %0johnny5 · search regex16 Eki 2026
- CVE-2026-10336521İzleyin
Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_details
OrtaCVSS 5,3İstismar yokEPSS %0ladela · online scheduling and appointment booking system – bookly10 Eki 2026