İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.349 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 17 / 64

  • CVE-2026-84249
    39İzleyin

    IBM Guardium Data Protection is affected by vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · guardium data protection8 Eki 2026

  • CVE-2026-84875
    35İzleyin

    Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · guardium data protection8 Eki 2026

  • CVE-2026-84891
    30İzleyin

    Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · guardium data protection8 Eki 2026

  • CVE-2026-87980
    22İzleyin

    Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection

    OrtaCVSS 5,5İstismar yokEPSS %0

    ibm · guardium data protection8 Eki 2026

  • CVE-2026-89091
    35İzleyin

    Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · migration toolkit for applications 88 Eki 2026

  • CVE-2026-105672
    34İzleyin

    Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · tapo c325wb v28 Eki 2026

  • CVE-2026-105673
    28İzleyin

    Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB

    YüksekCVSS 7,1İstismar yokEPSS %0

    tp-link systems inc. · tapo c325wb v28 Eki 2026

  • CVE-2026-105674
    34İzleyin

    Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · tapo c325wb v28 Eki 2026

  • CVE-2026-107728
    30İzleyin

    Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy

    YüksekCVSS 7,5İstismar yokEPSS %0

    strawberry-graphql · strawberry8 Eki 2026

  • CVE-2026-107732
    33İzleyin

    SumatraPDF: Markup/command-link injection into UI notification text

    YüksekCVSS 8,4İstismar yokEPSS %0

    sumatrapdfreader · sumatrapdf8 Eki 2026

  • CVE-2026-107734
    28İzleyin

    SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

    YüksekCVSS 7,1İstismar yokEPSS %0

    sumatrapdfreader · sumatrapdf8 Eki 2026

  • CVE-2026-107802
    28İzleyin

    SumatraPDF — Windows command-line argument injection in AI selection-translate

    YüksekCVSS 7,1İstismar yokEPSS %0

    sumatrapdfreader · sumatrapdf8 Eki 2026

  • CVE-2026-56857
    39İzleyin

    Root.Mkdir(All) can follow junctions out of the root on Windows in os

    KritikCVSS 9,8İstismar yokEPSS %0

    go standard library · os8 Eki 2026

  • CVE-2026-56866
    30İzleyin

    HTTP/1 client connection desynchronization after CONNECT rejection in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-69435
    32İzleyin

    Azure SRE Agent Elevation of Privilege Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    microsoft · azure sre agent8 Eki 2026

  • CVE-2026-77900
    39İzleyin

    Azure App Service Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · azure app service for linux8 Eki 2026

  • CVE-2026-78659
    30İzleyin

    HTTP/2 server memory exhaustion due to Trailer headers in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-78660
    30İzleyin

    HTTP/2 transport accepts malformed framing-related headers in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-78663
    36İzleyin

    Double flow control refund on HTTP/2 server streams in net/http

    KritikCVSS 9,1İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-78667
    30İzleyin

    Lack of limit on size of parsed Range headers in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-78669
    30İzleyin

    Excessive CPU consumption from repeated initial window changes in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-83943
    34İzleyin

    Azure API Center Information Disclosure Vulnerability

    YüksekCVSS 8,7İstismar yokEPSS %0

    microsoft · azure api center8 Eki 2026

  • CVE-2026-88131
    39İzleyin

    Microsoft Dataverse Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · dataverse8 Eki 2026

  • CVE-2026-94439
    30İzleyin

    HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-94440
    30İzleyin

    Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/textproto8 Eki 2026

  • CVE-2026-94444
    31İzleyin

    Checksum bypass for golang.org/fips140 in cmd/go

    YüksekCVSS 7,8İstismar yokEPSS %0

    go toolchain · cmd/go8 Eki 2026

  • CVE-2026-94447
    31İzleyin

    Checksum database bypass for golang.org/toolchain in cmd/go

    YüksekCVSS 7,8İstismar yokEPSS %0

    go toolchain · cmd/go8 Eki 2026

  • CVE-2026-94510
    39İzleyin

    Microsoft Bookings Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · microsoft bookings8 Eki 2026

  • CVE-2026-96207
    40Planlayın

    Microsoft Partner Center Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · partner center8 Eki 2026

  • CVE-2026-97031
    30İzleyin

    Reject malformed ECH outer extension references in crypto/tls

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · crypto/tls8 Eki 2026

  • CVE-2026-97032
    30İzleyin

    HTTP/2 server crash due to HPACK encoder race in net/http

    YüksekCVSS 7,5İstismar yokEPSS %0

    go standard library · net/http8 Eki 2026

  • CVE-2026-5759
    37İzleyin

    Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB

    KritikCVSS 9,3İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-7826
    35İzleyin

    Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB

    YüksekCVSS 8,8İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-7827
    36İzleyin

    Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

    KritikCVSS 9,2İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-107908
    37İzleyin

    Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message

    KritikCVSS 9,3İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-107909
    35İzleyin

    Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length

    YüksekCVSS 8,8İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-107910
    36İzleyin

    Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling

    KritikCVSS 9,2İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-107911
    30İzleyin

    Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument

    YüksekCVSS 7,7İstismar yokEPSS %0

    falkordb · falkordb9 Eki 2026

  • CVE-2026-107914
    31İzleyin

    Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archi

    YüksekCVSS 7,8İstismar yokEPSS %0

    backdropcms · backdrop9 Eki 2026

  • CVE-2025-15700
    35İzleyin

    AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · awp classifieds9 Eki 2026

  • CVE-2026-81929
    28İzleyin

    Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    oceanwp · ocean pro demos9 Eki 2026

  • CVE-2026-93548
    35İzleyin

    FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · foosales9 Eki 2026

  • CVE-2026-97076
    30İzleyin

    WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp media · wp rocket9 Eki 2026

  • CVE-2026-106145
    28İzleyin

    Privilege Escalation in Telerik Report Server Service-Agent Hub

    YüksekCVSS 7,1İstismar yokEPSS %0

    progress software · telerik report server9 Eki 2026

  • CVE-2026-106155
    35İzleyin

    Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers

    YüksekCVSS 8,9İstismar yokEPSS %0

    progress software · telerik report server9 Eki 2026

  • CVE-2026-19569
    35İzleyin

    Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap

    YüksekCVSS 8,8İstismar yokEPSS %0

    zephyrproject · zephyr9 Eki 2026

  • CVE-2026-19570
    35İzleyin

    Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state

    YüksekCVSS 8,8İstismar yokEPSS %0

    zephyrproject · zephyr9 Eki 2026

  • CVE-2026-19574
    28İzleyin

    ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation

    YüksekCVSS 7,0İstismar yokEPSS %0

    zephyrproject · zephyr9 Eki 2026

  • CVE-2026-19575
    31İzleyin

    Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code

    YüksekCVSS 7,8İstismar yokEPSS %0

    zephyrproject · zephyr9 Eki 2026

  • CVE-2026-104635
    32İzleyin

    Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

    YüksekCVSS 8,2İstismar yokEPSS %0

    elixir-protobuf · protobuf9 Eki 2026

  • CVE-2026-76769
    35İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-76779
    39İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78018
    28İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78019
    35İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Contro

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78020
    35İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78022
    32İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerabili

    YüksekCVSS 8,1İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-107935
    37İzleyin

    Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

    KritikCVSS 9,3İstismar yokEPSS %0

    red hat · red hat build of podman desktop9 Eki 2026

  • CVE-2026-71884
    32İzleyin

    Packet CTR reports a full success length after the counter is exhausted

    YüksekCVSS 8,2İstismar yokEPSS %0

    legion of the bouncy castle inc. · bc-lts-java9 Eki 2026

  • CVE-2026-78023
    35İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78024
    34İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.

    YüksekCVSS 8,7İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78025
    30İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vuln

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78026
    35İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78339
    28İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Res

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-78341
    28İzleyin

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %0

    dell · policy manager for secure connect gateway9 Eki 2026

  • CVE-2026-93947
    37İzleyin

    WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    shinetheme · traveler9 Eki 2026

  • CVE-2026-94158
    28İzleyin

    WordPress Gloria Admin Panel plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bkninja · gloria admin panel9 Eki 2026

  • CVE-2026-94159
    28İzleyin

    WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    klbtheme · total donations9 Eki 2026

  • CVE-2026-94161
    28İzleyin

    WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themegoods · grand restaurant9 Eki 2026

  • CVE-2026-94166
    28İzleyin

    WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    upsolution · upsolution core9 Eki 2026

  • CVE-2026-94167
    28İzleyin

    WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    extend themes · kubio ai page builder9 Eki 2026

  • CVE-2026-94170
    28İzleyin

    WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    heateor support · sassy social share9 Eki 2026

  • CVE-2026-94415
    28İzleyin

    WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    muffingroup · betheme9 Eki 2026

  • CVE-2026-94503
    40Planlayın

    WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    px-lab · zombify9 Eki 2026

  • CVE-2026-94568
    28İzleyin

    WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wp hosting as · pay with vipps for woocommerce9 Eki 2026

  • CVE-2026-94632
    28İzleyin

    WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    stiofan · blockstrap page builder - bootstrap blocks9 Eki 2026

  • CVE-2026-94641
    28İzleyin

    WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    stiofan · userswp9 Eki 2026

  • CVE-2026-94661
    28İzleyin

    WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    crocoblock · jetblog9 Eki 2026

  • CVE-2026-94663
    34İzleyin

    WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    metagauss · profilegrid9 Eki 2026

  • CVE-2026-94664
    30İzleyin

    WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    add-ons.org · pdf for contact form 79 Eki 2026

  • CVE-2026-94666
    30İzleyin

    WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    zealousweb · generate pdf using contact form 79 Eki 2026

  • CVE-2026-94668
    28İzleyin

    WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    dimitri grassi · salon booking system9 Eki 2026

  • CVE-2026-95591
    28İzleyin

    WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    e4jvikwp · vikbooking hotel booking engine & pms9 Eki 2026

  • CVE-2026-95596
    28İzleyin

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    mamunur rashid · shopbuilder – elementor woocommerce builder addons9 Eki 2026

  • CVE-2026-95598
    28İzleyin

    WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    codepeople · search in place9 Eki 2026

  • CVE-2026-95599
    34İzleyin

    WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    taskbuilder · taskbuilder9 Eki 2026

  • CVE-2026-95607
    34İzleyin

    WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    vibethemes · wplms9 Eki 2026

  • CVE-2026-95608
    28İzleyin

    WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    pluginus.net · husky9 Eki 2026

  • CVE-2026-95609
    28İzleyin

    WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    david lingren · media library assistant9 Eki 2026

  • CVE-2026-95610
    34İzleyin

    WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    upsolution · upsolution core9 Eki 2026

  • CVE-2026-96327
    37İzleyin

    WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    vibethemes · wplms9 Eki 2026

  • CVE-2026-96328
    37İzleyin

    WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    jegtheme · jnews - pay writer9 Eki 2026

  • CVE-2026-96329
    34İzleyin

    WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    tagdiv · tagdiv opt-in builder9 Eki 2026

  • CVE-2026-96330
    37İzleyin

    WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    tagdiv · tagdiv opt-in builder9 Eki 2026

  • CVE-2026-96331
    37İzleyin

    WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    wpdreams · ajax search pro9 Eki 2026

  • CVE-2026-96332
    28İzleyin

    WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    yalla ya! · simple payment9 Eki 2026

  • CVE-2026-96333
    30İzleyin

    WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    liquid web / stellarwp · givewp9 Eki 2026

  • CVE-2026-96336
    30İzleyin

    WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmu dev · forminator9 Eki 2026

  • CVE-2026-96461
    30İzleyin

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    tms · amelia9 Eki 2026

  • CVE-2026-96553
    28İzleyin

    WordPress FiboSearch plugin <= 1.34.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    damian góra · fibosearch9 Eki 2026

  • CVE-2026-96607
    28İzleyin

    WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    basix · nex-forms9 Eki 2026