RIA Labs
18 kredili kayıt · son 12 ayda 18 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
0İzleyin | CVE-2026-104338İstismar yok | Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Routeunknown · razorpay for woocommerce · CWE-862 | — | — | — | Bugün |
15İzleyin | CVE-2026-108068İstismar yok | FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizardunknown · fv flowplayer video player · CWE-862 | Düşük3,8 | — | %0,1 | 4 gün önce |
15İzleyin | CVE-2026-108067İstismar yok | FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDORunknown · fv flowplayer video player · CWE-639 | Düşük3,8 | — | %0,1 | 4 gün önce |
21İzleyin | CVE-2026-92086İstismar yok | MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameterwebsoudan · mw wp form · CWE-200 | Orta5,3 | — | %0,3 | 29 Eki 2026 |
15İzleyin | CVE-2026-114741İstismar yok | WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDORunknown · wpvr · CWE-639 | Düşük3,8 | — | %0,1 | 25 Eki 2026 |
10İzleyin | CVE-2026-110011İstismar yok | MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Exportunknown · mb custom post types & custom taxonomies · CWE-863 | Düşük2,7 | — | %0,2 | 22 Eki 2026 |
19İzleyin | CVE-2026-110010İstismar yok | MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameterunknown · mb custom post types & custom taxonomies · CWE-862 | Orta4,8 | — | %0,2 | 22 Eki 2026 |
30İzleyin | CVE-2026-111949İstismar yok | miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebindingunknown · miniorange 2fa · CWE-287 | Yüksek7,5 | — | %0,2 | 21 Eki 2026 |
22İzleyin | CVE-2026-111947İstismar yok | Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplicationunknown · pricing table wordpress plugin · CWE-639 | Orta5,5 | — | %0,2 | 21 Eki 2026 |
21İzleyin | CVE-2026-94294İstismar yok | App Builder 3.8.4 - 5.7.0 - Unauthenticated Option Write and Redirect via includes/pure.phpunknown · app builder · CWE-862 | Orta5,3 | — | %0,2 | 19 Eki 2026 |
28İzleyin | CVE-2026-110031İstismar yok | Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Keyunknown · salon booking system · CWE-269 | Yüksek7,2 | — | %0,2 | 18 Eki 2026 |
34İzleyin | CVE-2026-89299İstismar yok | WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameterunknown · wp verify api · CWE-89 | Yüksek8,6 | — | %0,2 | 11 Eki 2026 |
34İzleyin | CVE-2026-89213İstismar yok | Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameterunknown · llavero.io · CWE-89 | Yüksek8,6 | — | %0,2 | 11 Eki 2026 |
21İzleyin | CVE-2026-89300İstismar yok | WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipientsunknown · wp verify api · CWE-862 | Orta5,3 | — | %0,1 | 28 Eyl 2026 |
14İzleyin | CVE-2026-92965İstismar yok | TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemptionunknown · tiktok · CWE-862 | Düşük3,7 | — | %0,2 | 20 Eyl 2026 |
17İzleyin | CVE-2026-82185İstismar yok | WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Resetunknown · wplp cookie consent · CWE-862 | Orta4,3 | — | %0,2 | 9 Eyl 2026 |
21İzleyin | CVE-2026-84936İstismar yok | EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloatunknown · embedpress · CWE-284 | Orta5,3 | — | %0,3 | 5 Eyl 2026 |
23İzleyin | CVE-2026-81347İstismar yok | Frontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversalunknown · frontend admin by dynamiapps · CWE-73 | Orta5,9 | — | %0,3 | 4 Eyl 2026 |
39İzleyin | CVE-2026-77264İstismar yok | Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure101gen · automation web platform – notifications and otp for woocommerce, advanced country code · CWE-640 | Kritik9,8 | — | %0,7 | 21 Ağu 2026 |
- CVE-2026-1043380İzleyin
Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route
İstismar yokunknown · razorpay for woocommerceBugün
- CVE-2026-10806815İzleyin
FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard
DüşükCVSS 3,8İstismar yokEPSS %0unknown · fv flowplayer video player4 gün önce
- CVE-2026-10806715İzleyin
FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR
DüşükCVSS 3,8İstismar yokEPSS %0unknown · fv flowplayer video player4 gün önce
- CVE-2026-9208621İzleyin
MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter
OrtaCVSS 5,3İstismar yokEPSS %0websoudan · mw wp form29 Eki 2026
- CVE-2026-11474115İzleyin
WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR
DüşükCVSS 3,8İstismar yokEPSS %0unknown · wpvr25 Eki 2026
- CVE-2026-11001110İzleyin
MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export
DüşükCVSS 2,7İstismar yokEPSS %0unknown · mb custom post types & custom taxonomies22 Eki 2026
- CVE-2026-11001019İzleyin
MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter
OrtaCVSS 4,8İstismar yokEPSS %0unknown · mb custom post types & custom taxonomies22 Eki 2026
- CVE-2026-11194930İzleyin
miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding
YüksekCVSS 7,5İstismar yokEPSS %0unknown · miniorange 2fa21 Eki 2026
- CVE-2026-11194722İzleyin
Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication
OrtaCVSS 5,5İstismar yokEPSS %0unknown · pricing table wordpress plugin21 Eki 2026
- CVE-2026-9429421İzleyin
App Builder 3.8.4 - 5.7.0 - Unauthenticated Option Write and Redirect via includes/pure.php
OrtaCVSS 5,3İstismar yokEPSS %0unknown · app builder19 Eki 2026
- CVE-2026-11003128İzleyin
Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key
YüksekCVSS 7,2İstismar yokEPSS %0unknown · salon booking system18 Eki 2026
- CVE-2026-8929934İzleyin
WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
YüksekCVSS 8,6İstismar yokEPSS %0unknown · wp verify api11 Eki 2026
- CVE-2026-8921334İzleyin
Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter
YüksekCVSS 8,6İstismar yokEPSS %0unknown · llavero.io11 Eki 2026
- CVE-2026-8930021İzleyin
WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients
OrtaCVSS 5,3İstismar yokEPSS %0unknown · wp verify api28 Eyl 2026
- CVE-2026-9296514İzleyin
TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption
DüşükCVSS 3,7İstismar yokEPSS %0unknown · tiktok20 Eyl 2026
- CVE-2026-8218517İzleyin
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
OrtaCVSS 4,3İstismar yokEPSS %0unknown · wplp cookie consent9 Eyl 2026
- CVE-2026-8493621İzleyin
EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat
OrtaCVSS 5,3İstismar yokEPSS %0unknown · embedpress5 Eyl 2026
- CVE-2026-8134723İzleyin
Frontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversal
OrtaCVSS 5,9İstismar yokEPSS %0unknown · frontend admin by dynamiapps4 Eyl 2026
- CVE-2026-7726439İzleyin
Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
KritikCVSS 9,8İstismar yokEPSS %0101gen · automation web platform – notifications and otp for woocommerce, advanced country code21 Ağu 2026