vgo0
248 kredili kayıt · son 12 ayda 2 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-0912İstismar yok | Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actionstoret · toret manager · CWE-269 | Yüksek8,8 | — | %0,3 | 19 Şub 2026 |
39İzleyin | CVE-2025-15521Kavram kanıtı | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeoverkodezen · academy lms – wordpress lms plugin for complete elearning solution · CWE-639 | Kritik9,8 | — | %0,4 | 20 Oca 2026 |
24İzleyin | CVE-2025-10146İstismar yok | Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parametercodename065 · download manager · CWE-79 | Orta6,1 | — | %0,2 | 19 Eyl 2025 |
39İzleyin | CVE-2025-7341İstismar yok | HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletionhasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks · CWE-269 | Kritik9,8 | — | %1,1 | 15 Tem 2025 |
40Planlayın | CVE-2025-7340Kavram kanıtı | HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Uploadhasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks · CWE-434 | Kritik9,8 | — | %1,7 | 15 Tem 2025 |
35İzleyin | CVE-2025-1309İstismar yok | UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Updateadmintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages · CWE-862 | Yüksek8,8 | — | %0,4 | 7 Mar 2025 |
24İzleyin | CVE-2024-9212İstismar yok | SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scriptingwpwham · sku generator for woocommerce · CWE-79 | Orta6,1 | — | %0,3 | 1 Mar 2025 |
24İzleyin | CVE-2025-1511İstismar yok | User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scriptingwpeverest · user registration · CWE-79 | Orta6,1 | — | %0,3 | 28 Şub 2025 |
24İzleyin | CVE-2025-1505İstismar yok | Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scriptingberocket · advanced ajax product filters · CWE-79 | Orta6,1 | — | %0,2 | 28 Şub 2025 |
24İzleyin | CVE-2024-12339İstismar yok | Digihood HTML Sitemap <= 3.1.1 - Reflected Cross-Site Scripting via 'channel'digihood · digihood html sitemap · CWE-79 | Orta6,1 | — | %0,4 | 19 Şub 2025 |
24İzleyin | CVE-2024-11376İstismar yok | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scriptingclavaque · s2member · CWE-79 | Orta6,1 | — | %0,4 | 18 Şub 2025 |
24İzleyin | CVE-2024-12320İstismar yok | Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'shoalsummitsolutions · team rosters · CWE-79 | Orta6,1 | — | %0,3 | 30 Oca 2025 |
24İzleyin | CVE-2024-12299İstismar yok | System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameterbowo · system dashboard · CWE-79 | Orta6,1 | — | %0,4 | 30 Oca 2025 |
24İzleyin | CVE-2024-12177İstismar yok | Ai Image Alt Text Generator for WP <= 1.0.6 - Reflected Cross-Site Scriptingwpmessiah · ai image alt text generator for wp · CWE-79 | Orta6,1 | — | %0,4 | 30 Oca 2025 |
24İzleyin | CVE-2024-12409İstismar yok | Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scriptingsimplepress · simplepress · CWE-79 | Orta6,1 | — | %0,3 | 30 Oca 2025 |
24İzleyin | CVE-2024-12334İstismar yok | WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scriptingcodexpert · wc affiliate · CWE-79 | Orta6,1 | — | %0,2 | 26 Oca 2025 |
24İzleyin | CVE-2024-12076İstismar yok | Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scriptingnebojsadabic · target video easy publish · CWE-79 | Orta6,1 | — | %0,3 | 25 Oca 2025 |
24İzleyin | CVE-2024-12005İstismar yok | WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scriptinginfinitescript · wp-bibtex · CWE-352 | Orta6,1 | — | %0,1 | 21 Oca 2025 |
24İzleyin | CVE-2024-12385İstismar yok | WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingkevonadonis · wp abstracts · CWE-352 | Orta6,1 | — | %0,2 | 18 Oca 2025 |
24İzleyin | CVE-2024-12466İstismar yok | Proofreading <= 1.2.1.1 - Reflected Cross-Site Scriptingscribit · proofreading · CWE-79 | Orta6,1 | — | %0,4 | 17 Oca 2025 |
24İzleyin | CVE-2024-12423İstismar yok | Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scriptingscottpaterson · business essentials for contact form 7 · CWE-79 | Orta6,1 | — | %0,3 | 15 Oca 2025 |
24İzleyin | CVE-2024-12403İstismar yok | Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scriptingrealwebcare · awesome responsive photo gallery – image & video lightbox gallery · CWE-79 | Orta6,1 | — | %0,3 | 15 Oca 2025 |
24İzleyin | CVE-2024-12412İstismar yok | Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scriptingmagepeopleteam · booking and rental manager for bike | car | resort | appointment | dress | equipment · CWE-79 | Orta6,1 | — | %0,3 | 11 Oca 2025 |
24İzleyin | CVE-2024-12407İstismar yok | Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scriptingmurali-indiacitys · push notification for post and buddypress · CWE-79 | Orta6,1 | — | %0,3 | 11 Oca 2025 |
24İzleyin | CVE-2024-11327İstismar yok | ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scriptingflowdee · clickwhale · CWE-79 | Orta6,1 | — | %0,3 | 10 Oca 2025 |
- CVE-2026-091235İzleyin
Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions
YüksekCVSS 8,8İstismar yokEPSS %0toret · toret manager19 Şub 2026
- CVE-2025-1552139İzleyin
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %0kodezen · academy lms – wordpress lms plugin for complete elearning solution20 Oca 2026
- CVE-2025-1014624İzleyin
Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter
OrtaCVSS 6,1İstismar yokEPSS %0codename065 · download manager19 Eyl 2025
- CVE-2025-734139İzleyin
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
KritikCVSS 9,8İstismar yokEPSS %1hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025
- CVE-2025-734040Planlayın
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %1hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025
- CVE-2025-130935İzleyin
UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
YüksekCVSS 8,8İstismar yokEPSS %0admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages7 Mar 2025
- CVE-2024-921224İzleyin
SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0wpwham · sku generator for woocommerce1 Mar 2025
- CVE-2025-151124İzleyin
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0wpeverest · user registration28 Şub 2025
- CVE-2025-150524İzleyin
Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0berocket · advanced ajax product filters28 Şub 2025
- CVE-2024-1233924İzleyin
Digihood HTML Sitemap <= 3.1.1 - Reflected Cross-Site Scripting via 'channel'
OrtaCVSS 6,1İstismar yokEPSS %0digihood · digihood html sitemap19 Şub 2025
- CVE-2024-1137624İzleyin
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0clavaque · s2member18 Şub 2025
- CVE-2024-1232024İzleyin
Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'
OrtaCVSS 6,1İstismar yokEPSS %0shoalsummitsolutions · team rosters30 Oca 2025
- CVE-2024-1229924İzleyin
System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter
OrtaCVSS 6,1İstismar yokEPSS %0bowo · system dashboard30 Oca 2025
- CVE-2024-1217724İzleyin
Ai Image Alt Text Generator for WP <= 1.0.6 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0wpmessiah · ai image alt text generator for wp30 Oca 2025
- CVE-2024-1240924İzleyin
Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0simplepress · simplepress30 Oca 2025
- CVE-2024-1233424İzleyin
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0codexpert · wc affiliate26 Oca 2025
- CVE-2024-1207624İzleyin
Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0nebojsadabic · target video easy publish25 Oca 2025
- CVE-2024-1200524İzleyin
WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0infinitescript · wp-bibtex21 Oca 2025
- CVE-2024-1238524İzleyin
WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0kevonadonis · wp abstracts18 Oca 2025
- CVE-2024-1246624İzleyin
Proofreading <= 1.2.1.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0scribit · proofreading17 Oca 2025
- CVE-2024-1242324İzleyin
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0scottpaterson · business essentials for contact form 715 Oca 2025
- CVE-2024-1240324İzleyin
Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0realwebcare · awesome responsive photo gallery – image & video lightbox gallery15 Oca 2025
- CVE-2024-1241224İzleyin
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0magepeopleteam · booking and rental manager for bike | car | resort | appointment | dress | equipment11 Oca 2025
- CVE-2024-1240724İzleyin
Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0murali-indiacitys · push notification for post and buddypress11 Oca 2025
- CVE-2024-1132724İzleyin
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0flowdee · clickwhale10 Oca 2025