skyv3il
7 kredili kayıt · son 12 ayda 7 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-14335İstismar yok | Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameterssmub · easy digital downloads – ecommerce payments and subscriptions made easy · CWE-79 | Yüksek7,2 | — | %0,1 | 10 Eki 2026 |
17İzleyin | CVE-2026-13471İstismar yok | LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities Rlatepoint · appointment booking plugin – latepoint | calendar & scheduling for wordpress · CWE-639 | Orta4,3 | — | %0,4 | 18 Eyl 2026 |
24İzleyin | CVE-2026-15009İstismar yok | Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parametersaadiqbal · advanced file manager – ultimate file manager for wordpress and document library solution · CWE-79 | Orta6,1 | — | %0,3 | 16 Ağu 2026 |
17İzleyin | CVE-2026-13167İstismar yok | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary wpeverest · everest forms – contact form, payment form, quiz, survey & custom form builder with ai · CWE-862 | Orta4,3 | — | %0,4 | 16 Ağu 2026 |
35İzleyin | CVE-2026-13352İstismar yok | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File properfraction · paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress · CWE-434 | Yüksek8,8 | — | %1,0 | 17 Tem 2026 |
25İzleyin | CVE-2026-14987İstismar yok | GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Settingstellarwp · givewp – donation plugin and fundraising platform · CWE-79 | Orta6,4 | — | %0,3 | 16 Tem 2026 |
25İzleyin | CVE-2026-13443İstismar yok | Tutor LMS <= 3.9.13 - Authenticated (Author+) Stored Cross-Site Scripting via Lesson Attachment Titlethemeum · tutor lms – elearning and online course solution · CWE-79 | Orta6,4 | — | %0,3 | 1 Tem 2026 |
- CVE-2026-1433528İzleyin
Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters
YüksekCVSS 7,2İstismar yokEPSS %0smub · easy digital downloads – ecommerce payments and subscriptions made easy10 Eki 2026
- CVE-2026-1347117İzleyin
LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities R
OrtaCVSS 4,3İstismar yokEPSS %0latepoint · appointment booking plugin – latepoint | calendar & scheduling for wordpress18 Eyl 2026
- CVE-2026-1500924İzleyin
Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter
OrtaCVSS 6,1İstismar yokEPSS %0saadiqbal · advanced file manager – ultimate file manager for wordpress and document library solution16 Ağu 2026
- CVE-2026-1316717İzleyin
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary
OrtaCVSS 4,3İstismar yokEPSS %0wpeverest · everest forms – contact form, payment form, quiz, survey & custom form builder with ai16 Ağu 2026
- CVE-2026-1335235İzleyin
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File
YüksekCVSS 8,8İstismar yokEPSS %1properfraction · paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress17 Tem 2026
- CVE-2026-1498725İzleyin
GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting
OrtaCVSS 6,4İstismar yokEPSS %0stellarwp · givewp – donation plugin and fundraising platform16 Tem 2026
- CVE-2026-1344325İzleyin
Tutor LMS <= 3.9.13 - Authenticated (Author+) Stored Cross-Site Scripting via Lesson Attachment Title
OrtaCVSS 6,4İstismar yokEPSS %0themeum · tutor lms – elearning and online course solution1 Tem 2026