Webbernaut
6 kredili kayıt · son 12 ayda 4 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
25İzleyin | CVE-2026-14876İstismar yok | Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Blocknextendweb · smart slider 3 · CWE-79 | Orta6,4 | — | — | Bugün |
35İzleyin | CVE-2026-0551İstismar yok | PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_rolesbuildwps · ppwp – password protect pages · CWE-502 | Yüksek8,8 | — | %0,7 | 22 Ağu 2026 |
25İzleyin | CVE-2026-12801İstismar yok | Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributesthemefic · ultra addons for contact form 7 · CWE-79 | Orta6,4 | — | %0,3 | 7 Ağu 2026 |
28İzleyin | CVE-2026-13114İstismar yok | Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Infostylemix · motors – car dealership & classified listings plugin · CWE-79 | Yüksek7,2 | — | %0,4 | 11 Tem 2026 |
32İzleyin | CVE-2026-12240İstismar yok | Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Fieldqlstudio · export user data · CWE-502 | Yüksek8,0 | — | %0,6 | 30 Haz 2026 |
25İzleyin | CVE-2024-5647İstismar yok | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Libraryblossomthemes · blossomthemes social feed · CWE-79 | Orta6,4 | — | %0,3 | 3 Tem 2025 |
21İzleyin | CVE-2023-3372İstismar yok | Lana Shortcodes < 1.2.0 - Contributor+ Stored XSSlana · lana shortcodes · CWE-79 | Orta5,4 | — | %0,5 | 16 Oca 2024 |
- CVE-2026-1487625İzleyin
Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block
OrtaCVSS 6,4İstismar yoknextendweb · smart slider 3Bugün
- CVE-2026-055135İzleyin
PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles
YüksekCVSS 8,8İstismar yokEPSS %1buildwps · ppwp – password protect pages22 Ağu 2026
- CVE-2026-1280125İzleyin
Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes
OrtaCVSS 6,4İstismar yokEPSS %0themefic · ultra addons for contact form 77 Ağu 2026
- CVE-2026-1311428İzleyin
Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
YüksekCVSS 7,2İstismar yokEPSS %0stylemix · motors – car dealership & classified listings plugin11 Tem 2026
- CVE-2026-1224032İzleyin
Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field
YüksekCVSS 8,0İstismar yokEPSS %1qlstudio · export user data30 Haz 2026
- CVE-2024-564725İzleyin
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
OrtaCVSS 6,4İstismar yokEPSS %0blossomthemes · blossomthemes social feed3 Tem 2025
- CVE-2023-337221İzleyin
Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0lana · lana shortcodes16 Oca 2024