SOPROBRO (Patchstack Alliance)

15 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
28İzleyin	CVE-2025-24749İstismar yok	WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerabilityovert software solutions ltd · ezpz saml sp single sign on (sso) · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,1	31 Oca 2025
28İzleyin	CVE-2025-22706İstismar yok	WordPress Social Pug: Author Box plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityiova.mihai · social pug: author box · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,2	21 Oca 2025
26İzleyin	CVE-2025-23907İstismar yok	WordPress SOCIAL.NINJA plugin <= 0.2 - Cross Site Scripting (XSS) vulnerabilityclosed · social.ninja · CWE-79 XSS	Orta6,5	—	%0,3	16 Oca 2025
26İzleyin	CVE-2025-23824İstismar yok	WordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityalexander weleczka · fontawesome.io shortcodes · CWE-79 XSS	Orta6,5	—	%0,2	16 Oca 2025
26İzleyin	CVE-2025-23816İstismar yok	WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerabilitymetaphorcreations · metaphor widgets · CWE-79 XSS	Orta6,5	—	%0,3	16 Oca 2025
28İzleyin	CVE-2025-23815İstismar yok	WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerabilitylinickx · root cookie · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,2	16 Oca 2025
28İzleyin	CVE-2025-23559İstismar yok	WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerabilitystepan stepasyuk · memeone · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,1	16 Oca 2025
26İzleyin	CVE-2025-22724İstismar yok	WordPress Product Carousel For WooCommerce – WoorouSell plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilitymojofywp · product carousel for woocommerce – woorousell · CWE-79 XSS	Orta6,5	—	%0,3	15 Oca 2025
26İzleyin	CVE-2024-54241İstismar yok	WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerabilityappsbd · elite notification – sales popup, social proof, fomo & woocommerce notification · CWE-862 Erişim denetimi (IDOR) XSS	Orta6,5	—	%0,3	13 Ara 2024
28İzleyin	CVE-2024-53750İstismar yok	WordPress PayPal Responder plugin <= 1.2 - CSRF to Stored XSS vulnerabilitymaeve lander · paypal responder · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,1	1 Ara 2024
28İzleyin	CVE-2024-51647İstismar yok	WordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitychaser324 · featured posts scroll · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,1	9 Kas 2024
35İzleyin	CVE-2024-50466İstismar yok	WordPress DarkMySite – Advanced Dark Mode Plugin for WordPress plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerabilitydarkmysite · darkmysite · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	29 Eki 2024
35İzleyin	CVE-2024-49627İstismar yok	WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerabilitynoorsplugin · wordpress image seo · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	20 Eki 2024
23İzleyin	CVE-2024-47372İstismar yok	WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerabilitythemencode llc · tnc pdf viewer · CWE-79 XSS	Orta5,9	—	%0,2	5 Eki 2024
24İzleyin	CVE-2024-43317İstismar yok	WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerabilitymetagauss · registrationmagic · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,2	19 Ağu 2024

CVE-2025-24749
28İzleyin
WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
overt software solutions ltd · ezpz saml sp single sign on (sso)31 Oca 2025
CVE-2025-22706
28İzleyin
WordPress Social Pug: Author Box plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
iova.mihai · social pug: author box21 Oca 2025
CVE-2025-23907
26İzleyin
WordPress SOCIAL.NINJA plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
closed · social.ninja16 Oca 2025
CVE-2025-23824
26İzleyin
WordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
alexander weleczka · fontawesome.io shortcodes16 Oca 2025
CVE-2025-23816
26İzleyin
WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
metaphorcreations · metaphor widgets16 Oca 2025
CVE-2025-23815
28İzleyin
WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
linickx · root cookie16 Oca 2025
CVE-2025-23559
28İzleyin
WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
stepan stepasyuk · memeone16 Oca 2025
CVE-2025-22724
26İzleyin
WordPress Product Carousel For WooCommerce – WoorouSell plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
mojofywp · product carousel for woocommerce – woorousell15 Oca 2025
CVE-2024-54241
26İzleyin
WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- XSS
appsbd · elite notification – sales popup, social proof, fomo & woocommerce notification13 Ara 2024
CVE-2024-53750
28İzleyin
WordPress PayPal Responder plugin <= 1.2 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
maeve lander · paypal responder1 Ara 2024
CVE-2024-51647
28İzleyin
WordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
chaser324 · featured posts scroll9 Kas 2024
CVE-2024-50466
35İzleyin
WordPress DarkMySite – Advanced Dark Mode Plugin for WordPress plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
darkmysite · darkmysite29 Eki 2024
CVE-2024-49627
35İzleyin
WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
noorsplugin · wordpress image seo20 Eki 2024
CVE-2024-47372
23İzleyin
WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
themencode llc · tnc pdf viewer5 Eki 2024
CVE-2024-43317
24İzleyin
WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
metagauss · registrationmagic19 Ağu 2024