İçeriğe atla
Noroxi

wesley

325 kredili kayıt · son 12 ayda 9 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-5149
    26İzleyin

    RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter

    OrtaCVSS 6,5İstismar yokEPSS %0

    rometheme · rtmkit16 Haz 2026

  • CVE-2026-3018
    30İzleyin

    Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    contrid · newsletters10 Haz 2026

  • CVE-2026-5032
    31İzleyin

    W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    boldgrid · w3 total cache2 Nis 2026

  • CVE-2025-13910
    24İzleyin

    WP-WebAuthn <= 1.3.4 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    axton · wp-webauthn21 Mar 2026

  • CVE-2025-14002
    32İzleyin

    WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP

    YüksekCVSS 8,1İstismar yokEPSS %1

    whyun · wpcom member16 Ara 2025

  • CVE-2025-8606
    9İzleyin

    GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation

    DüşükCVSS 2,4İstismar yokEPSS %0

    westerndeal · gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-time11 Eki 2025

  • CVE-2025-8593
    35İzleyin

    GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

    YüksekCVSS 8,8İstismar yokEPSS %0

    westerndeal · gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-time11 Eki 2025

  • CVE-2025-7634
    39İzleyin

    WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8İstismar yokEPSS %1

    wptravelengine · wp travel engine – tour booking plugin – tour operator software9 Eki 2025

  • CVE-2025-7526
    39İzleyin

    WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming

    KritikCVSS 9,8İstismar yokEPSS %1

    wptravelengine · wp travel engine – tour booking plugin – tour operator software9 Eki 2025

  • CVE-2025-7052
    35İzleyin

    LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function

    YüksekCVSS 8,8İstismar yokEPSS %0

    latepoint · latepoint – calendar booking plugin for appointments and events30 Eyl 2025

  • CVE-2025-7038
    32İzleyin

    LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step Function

    YüksekCVSS 8,2İstismar yokEPSS %0

    latepoint · latepoint – calendar booking plugin for appointments and events30 Eyl 2025

  • CVE-2025-8487
    21İzleyin

    Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · kubio ai page builder19 Eyl 2025

  • CVE-2025-8565
    32İzleyin

    Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitr

    YüksekCVSS 8,1İstismar yokEPSS %0

    wplegalpages · privacy policy generator – wplp legal pages18 Eyl 2025

  • CVE-2025-8446
    17İzleyin

    Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

    OrtaCVSS 4,3İstismar yokEPSS %0

    blazethemes · blaze demo importer16 Eyl 2025

  • CVE-2025-8481
    17İzleyin

    Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery

    OrtaCVSS 4,3İstismar yokEPSS %0

    mdimran41 · blog designer for elementor – post slider, post carousel, post grid11 Eyl 2025

  • CVE-2025-8479
    17İzleyin

    Zoho Flow <= 2.14.1 - Cross-Site Request Forgery

    OrtaCVSS 4,3İstismar yokEPSS %0

    zohoflow · zoho flow – integrate 100+ plugins with 1000+ business apps, no-code workflow automation11 Eyl 2025

  • CVE-2025-8147
    17İzleyin

    LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function

    OrtaCVSS 4,3İstismar yokEPSS %0

    aurelienlws · lwscache29 Ağu 2025

  • CVE-2024-13807
    30İzleyin

    Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files

    YüksekCVSS 7,5İstismar yokEPSS %0

    xagio · xagio seo – ai powered seo28 Ağu 2025

  • CVE-2024-9648
    24İzleyin

    WP ULike Pro <= 1.9.3 - Unauthenticated Limited Arbitrary File Upload

    OrtaCVSS 6,1İstismar yokEPSS %0

    wp ulike · wp ulike pro28 Ağu 2025

  • CVE-2025-8102
    21İzleyin

    Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions

    OrtaCVSS 5,4İstismar yokEPSS %0

    smub · easy digital downloads – ecommerce payments and subscriptions made easy20 Ağu 2025

  • CVE-2025-7654
    35İzleyin

    Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library

    YüksekCVSS 8,8İstismar yokEPSS %1

    amans2k · funnelkit automations – email marketing automation and crm for wordpress & woocommerce19 Ağu 2025

  • CVE-2025-8357
    17İzleyin

    Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

    OrtaCVSS 4,3İstismar yokEPSS %0

    dglingren · media library assistant19 Ağu 2025

  • CVE-2025-8680
    17İzleyin

    B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery

    OrtaCVSS 4,3İstismar yokEPSS %0

    bplugins · bslider – create responsive image, post, product, and video sliders14 Ağu 2025

  • CVE-2025-8676
    17İzleyin

    B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure

    OrtaCVSS 4,3İstismar yokEPSS %0

    bplugins · bslider – create responsive image, post, product, and video sliders14 Ağu 2025

  • CVE-2025-8418
    35İzleyin

    B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation

    YüksekCVSS 8,8İstismar yokEPSS %1

    bplugins · bslider – create responsive image, post, product, and video sliders12 Ağu 2025