Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
6.164 kayıt · 12 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 20 / 62
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-108546İstismar yok | Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integrationspotweb · spotweb · CWE-78 | Yüksek7,7 | — | %0,8 | 10 Eki 2026 |
28İzleyin | CVE-2026-108547İstismar yok | AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-variflytek · astron-rpa · CWE-639 | Yüksek7,1 | — | %0,2 | 10 Eki 2026 |
36İzleyin | CVE-2026-108549İstismar yok | cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofingchenhg5 · cc-connect · CWE-306 | Kritik9,2 | — | %0,4 | 10 Eki 2026 |
34İzleyin | CVE-2026-108550İstismar yok | SkillHub before 0.2.22 Account Takeover via Account Merge Flowiflytek · skillhub · CWE-863 | Yüksek8,7 | — | %0,3 | 10 Eki 2026 |
37İzleyin | CVE-2026-108551İstismar yok | openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templatesferdikoomen · openapi-typescript-codegen · CWE-94 | Kritik9,3 | — | %0,4 | 10 Eki 2026 |
30İzleyin | CVE-2026-108553İstismar yok | OpenRefine through 3.10.1 CSRF to RCE via get-rows Commandopenrefine · openrefine · CWE-352 | Yüksek7,7 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-108581İstismar yok | Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providerstencentcloud · octop · CWE-862 | Yüksek7,1 | — | %0,2 | 10 Eki 2026 |
30İzleyin | CVE-2026-103071İstismar yok | WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerabilityvillatheme · thank you page customizer for woocommerce · CWE-94 | Yüksek7,5 | — | %0,2 | 10 Eki 2026 |
39İzleyin | CVE-2026-104398İstismar yok | WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerabilityvillatheme · affi – affiliate marketing for woocommerce · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
37İzleyin | CVE-2026-105889İstismar yok | WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerabilitytickera · tickera · CWE-89 | Kritik9,3 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-106608İstismar yok | WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerabilityautomattic · woocommerce · CWE-266 | Yüksek7,2 | — | %0,2 | 10 Eki 2026 |
30İzleyin | CVE-2026-106609İstismar yok | WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerabilityweb impian · bayarcash woocommerce · CWE-862 | Yüksek7,5 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-62044İstismar yok | WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerabilitybplugins · super video player · CWE-502 | Yüksek7,2 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-94160İstismar yok | WordPress ThemeStek Extras for LabtechCO Theme plugin <= 8.4 - Reflected Cross Site Scripting (XSS) vulnerabilitythemestek · themestek extras for labtechco theme · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
39İzleyin | CVE-2026-105892İstismar yok | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerabilityrtcamp inc. · rtmedia for wordpress, buddypress and bbpress · CWE-22 | Kritik9,8 | — | %0,4 | 10 Eki 2026 |
39İzleyin | CVE-2026-106610Kavram kanıtı | WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerabilityminiorange · miniorange otp verification · CWE-266 | Kritik9,8 | — | %0,4 | 10 Eki 2026 |
24İzleyin | CVE-2026-108592Kavram kanıtı | mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironmentswe-agent · mini-swe-agent · CWE-526 | Orta6,0 | — | %0,3 | 10 Eki 2026 |
29İzleyin | CVE-2026-108593İstismar yok | 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpointdecolua · 9router · CWE-94 | Yüksek7,3 | — | %0,2 | 10 Eki 2026 |
37İzleyin | CVE-2026-108598Kavram kanıtı | Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templatesfloci-io · floci · CWE-94 | Kritik9,3 | — | %0,7 | 10 Eki 2026 |
28İzleyin | CVE-2026-57806İstismar yok | WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 - Reflected Cross Site Scripting (XSS) vulnerabilitydrfuri · martfury - woocommerce marketplace wordpress theme · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-96341İstismar yok | WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerabilitywpmu dev · forminator · CWE-266 | Yüksek8,2 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-27350İstismar yok | WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerabilitybuilderius.io · builderius · CWE-918 | Yüksek7,2 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-39799İstismar yok | WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerabilityjoomunited · wp file download · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-39800İstismar yok | WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Site Scripting (XSS) vulnerabilityanton bond · additional order filters for woocommerce · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
39İzleyin | CVE-2026-39801İstismar yok | WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerabilitysergey · aiwu · CWE-266 | Kritik9,8 | — | %0,4 | 10 Eki 2026 |
32İzleyin | CVE-2026-39802İstismar yok | WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerabilityeverestthemes · everest backup · CWE-94 | Yüksek8,1 | — | %0,4 | 10 Eki 2026 |
32İzleyin | CVE-2026-40777İstismar yok | WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerabilityrashid · wpsection · CWE-862 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
37İzleyin | CVE-2026-40800İstismar yok | WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerabilityelextensions · elex woocommerce advanced bulk edit products, prices & attributes · CWE-89 | Kritik9,3 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-40801İstismar yok | WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerabilitywordable · wordable · CWE-862 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
30İzleyin | CVE-2026-40802İstismar yok | WordPress Pubjet | پابجت plugin <= 5.4.8 - Settings Change vulnerabilitypubjet · pubjet | پابجت · CWE-862 | Yüksek7,6 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-40803İstismar yok | WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerabilityjotform · jotform – ai chatbot · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
30İzleyin | CVE-2026-40805İstismar yok | WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerabilitypeepso · peepso · CWE-22 | Yüksek7,7 | — | %0,4 | 10 Eki 2026 |
30İzleyin | CVE-2026-42630İstismar yok | WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerabilityweb plura · web plura backup & restore manager · CWE-201 | Yüksek7,5 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-42631İstismar yok | WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerabilityqode · qode music · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-42632İstismar yok | WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerabilityqode · qode real estate · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
34İzleyin | CVE-2026-42633İstismar yok | WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerabilitymarcus · events manager · CWE-89 | Yüksek8,5 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-42693İstismar yok | WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerabilitytielabs · jannah · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
40Planlayın | CVE-2026-42696İstismar yok | WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerabilityroyal plugins · sitevault – backup, restore, migration & cloning · CWE-94 | Kritik10,0 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-42697İstismar yok | WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerabilityinisev · social share icons & social share buttons · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-42699İstismar yok | WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerabilityfoliovision · fv player 8 · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-42702İstismar yok | WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilitythemeum · tutor lms · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-42704İstismar yok | WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerabilityaxiomthemes · kids care · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
30İzleyin | CVE-2026-42705İstismar yok | WordPress Grand News theme <= 3.4 - Broken Access Control vulnerabilitythemegoods · grand news · CWE-862 | Yüksek7,5 | — | %0,2 | 10 Eki 2026 |
30İzleyin | CVE-2026-42706İstismar yok | WordPress DK theme <= 3.2.1 - Broken Access Control vulnerabilitythemegoods · dk · CWE-862 | Yüksek7,5 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-42709İstismar yok | WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerabilityradiustheme · food menu – restaurant menu & online ordering for woocommerce · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-42711İstismar yok | WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability10web · slider by 10web · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
34İzleyin | CVE-2026-42712İstismar yok | WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerabilityqode · qode tours · CWE-89 | Yüksek8,5 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-42715İstismar yok | WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability10web · photo gallery by 10web · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
39İzleyin | CVE-2026-42716İstismar yok | WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerabilitypayever · payever - woocommerce gateway · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
30İzleyin | CVE-2026-42717İstismar yok | WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerabilityvaultdweller · leyka · CWE-89 | Yüksek7,6 | — | %0,2 | 10 Eki 2026 |
39İzleyin | CVE-2026-42718İstismar yok | WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerabilitypluggabl · booster for woocommerce · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-42719İstismar yok | WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerabilitysarah giles · dynamic user directory · CWE-502 | Kritik9,8 | — | %0,5 | 10 Eki 2026 |
30İzleyin | CVE-2026-42722İstismar yok | WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerabilityshabti kaplan · frontend admin by dynamiapps · CWE-89 | Yüksek7,6 | — | %0,2 | 10 Eki 2026 |
39İzleyin | CVE-2026-42723İstismar yok | WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerabilityancorathemes · cleanskin · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-42724İstismar yok | WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerabilityancorathemes · cleanskin · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-42777İstismar yok | WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerabilityedge-themes · aalto · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
30İzleyin | CVE-2026-45440İstismar yok | WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerabilitysmackcoders inc. · wp ultimate csv importer · CWE-89 | Yüksek7,6 | — | %0,2 | 10 Eki 2026 |
32İzleyin | CVE-2026-48193İstismar yok | WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerabilitykutethemes · uminex · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-48194İstismar yok | WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerabilitykutethemes · dukamarket · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-57742İstismar yok | WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerabilitythemerex group · kids planet · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-62020İstismar yok | WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerabilitymikado-themes · touchup · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
35İzleyin | CVE-2026-62021İstismar yok | WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerabilityrascals · angio · CWE-502 | Yüksek8,8 | — | %0,4 | 10 Eki 2026 |
39İzleyin | CVE-2026-62022İstismar yok | WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerabilityselect-themes · tonda membership · CWE-266 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62024İstismar yok | WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerabilitycodebard · codebard help desk · CWE-434 | Kritik9,9 | — | %0,4 | 10 Eki 2026 |
36İzleyin | CVE-2026-62025İstismar yok | WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerabilitytailored media · tailored tools · CWE-434 | Kritik9,0 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-62027İstismar yok | WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilitybplugins · team section block · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-62030İstismar yok | WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerabilitybplugins · streamcast · CWE-918 | Yüksek7,2 | — | %0,1 | 10 Eki 2026 |
37İzleyin | CVE-2026-62031İstismar yok | WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerabilitystylemix · ulisting · CWE-89 | Kritik9,3 | — | %0,2 | 10 Eki 2026 |
39İzleyin | CVE-2026-62032İstismar yok | WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerabilitydesigninvento · directorypress · CWE-98 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
30İzleyin | CVE-2026-62033İstismar yok | WordPress uListing plugin <= 2.2.0 - Settings Change vulnerabilitystylemix · ulisting · CWE-862 | Yüksek7,6 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-62034İstismar yok | WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerabilitybplugins · before after image comparison – image comparison for wp · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
28İzleyin | CVE-2026-62037İstismar yok | WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilitybplugins · document embedder · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
29İzleyin | CVE-2026-62038İstismar yok | WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerabilitydigitalme · eroom · CWE-288 | Yüksek7,3 | — | %0,2 | 10 Eki 2026 |
30İzleyin | CVE-2026-62043İstismar yok | WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerabilitysevenspark · contact form 7 – dynamic text extension · CWE-201 | Yüksek7,5 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62050İstismar yok | WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerabilitythemerex · splendour · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62051İstismar yok | WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerabilitythemerex · stargaze · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62052İstismar yok | WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerabilitythemerex · tipsy · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62053İstismar yok | WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerabilitythemerex · wine house · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62054İstismar yok | WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerabilitythemerex · yacht rental · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-62064İstismar yok | WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilitybracketweb · ambed · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-62065İstismar yok | WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerabilitycocobasic · cardea · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62066İstismar yok | WordPress Volos theme <= 1.2 - Local File Inclusion vulnerabilitycocobasic · volos · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62067İstismar yok | WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerabilitycocobasic · kaven · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62068İstismar yok | WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerabilitycocobasic · teoro · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62069İstismar yok | WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerabilitycocobasic · fabius · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62070İstismar yok | WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerabilityckthemes · flipmart · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62074İstismar yok | WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerabilitythemerex · ozeum · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
32İzleyin | CVE-2026-62075İstismar yok | WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerabilitymymoun · backhoe · CWE-98 | Yüksek8,1 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62076İstismar yok | WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerabilitythe4 · kalles · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62077İstismar yok | WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerabilityboldthemes · avala · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-62082İstismar yok | WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerabilityan-themes · pin wp · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
39İzleyin | CVE-2026-62086İstismar yok | WordPress Juno theme <= 2.25 - PHP Object Injection vulnerabilitythemerex · juno · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62087İstismar yok | WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerabilitythemerex · equadio · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
39İzleyin | CVE-2026-62090İstismar yok | WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerabilitythemerex · wineshop · CWE-502 | Kritik9,8 | — | %0,3 | 10 Eki 2026 |
28İzleyin | CVE-2026-62091İstismar yok | WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerabilitykutethemes · armania · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-62092İstismar yok | WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerabilitykutethemes · armania · CWE-98 | Yüksek8,1 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-62093İstismar yok | WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilitykutethemes · techone · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-62094İstismar yok | WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerabilitykutethemes · techone · CWE-98 | Yüksek8,1 | — | %0,2 | 10 Eki 2026 |
28İzleyin | CVE-2026-62095İstismar yok | WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilitykutethemes · biolife · CWE-79 | Yüksek7,1 | — | %0,1 | 10 Eki 2026 |
32İzleyin | CVE-2026-62096İstismar yok | WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerabilitykutethemes · biolife · CWE-98 | Yüksek8,1 | — | %0,2 | 10 Eki 2026 |
- CVE-2026-10854630İzleyin
Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration
YüksekCVSS 7,7İstismar yokEPSS %0spotweb · spotweb10 Eki 2026
- CVE-2026-10854728İzleyin
AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var
YüksekCVSS 7,1İstismar yokEPSS %0iflytek · astron-rpa10 Eki 2026
- CVE-2026-10854936İzleyin
cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
KritikCVSS 9,2İstismar yokEPSS %0chenhg5 · cc-connect10 Eki 2026
- CVE-2026-10855034İzleyin
SkillHub before 0.2.22 Account Takeover via Account Merge Flow
YüksekCVSS 8,7İstismar yokEPSS %0iflytek · skillhub10 Eki 2026
- CVE-2026-10855137İzleyin
openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
KritikCVSS 9,3İstismar yokEPSS %0ferdikoomen · openapi-typescript-codegen10 Eki 2026
- CVE-2026-10855330İzleyin
OpenRefine through 3.10.1 CSRF to RCE via get-rows Command
YüksekCVSS 7,7İstismar yokEPSS %0openrefine · openrefine10 Eki 2026
- CVE-2026-10858128İzleyin
Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
YüksekCVSS 7,1İstismar yokEPSS %0tencentcloud · octop10 Eki 2026
- CVE-2026-10307130İzleyin
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0villatheme · thank you page customizer for woocommerce10 Eki 2026
- CVE-2026-10439839İzleyin
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0villatheme · affi – affiliate marketing for woocommerce10 Eki 2026
- CVE-2026-10588937İzleyin
WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0tickera · tickera10 Eki 2026
- CVE-2026-10660828İzleyin
WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0automattic · woocommerce10 Eki 2026
- CVE-2026-10660930İzleyin
WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0web impian · bayarcash woocommerce10 Eki 2026
- CVE-2026-6204428İzleyin
WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0bplugins · super video player10 Eki 2026
- CVE-2026-9416028İzleyin
WordPress ThemeStek Extras for LabtechCO Theme plugin <= 8.4 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themestek · themestek extras for labtechco theme10 Eki 2026
- CVE-2026-10589239İzleyin
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability
KritikCVSS 9,8İstismar yokEPSS %0rtcamp inc. · rtmedia for wordpress, buddypress and bbpress10 Eki 2026
- CVE-2026-10661039İzleyin
WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %0miniorange · miniorange otp verification10 Eki 2026
- CVE-2026-10859224İzleyin
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
OrtaCVSS 6,0Kavram kanıtıEPSS %0swe-agent · mini-swe-agent10 Eki 2026
- CVE-2026-10859329İzleyin
9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
YüksekCVSS 7,3İstismar yokEPSS %0decolua · 9router10 Eki 2026
- CVE-2026-10859837İzleyin
Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
KritikCVSS 9,3Kavram kanıtıEPSS %0floci-io · floci10 Eki 2026
- CVE-2026-5780628İzleyin
WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0drfuri · martfury - woocommerce marketplace wordpress theme10 Eki 2026
- CVE-2026-9634132İzleyin
WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0wpmu dev · forminator10 Eki 2026
- CVE-2026-2735028İzleyin
WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0builderius.io · builderius10 Eki 2026
- CVE-2026-3979928İzleyin
WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0joomunited · wp file download10 Eki 2026
- CVE-2026-3980028İzleyin
WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0anton bond · additional order filters for woocommerce10 Eki 2026
- CVE-2026-3980139İzleyin
WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0sergey · aiwu10 Eki 2026
- CVE-2026-3980232İzleyin
WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0everestthemes · everest backup10 Eki 2026
- CVE-2026-4077732İzleyin
WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0rashid · wpsection10 Eki 2026
- CVE-2026-4080037İzleyin
WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0elextensions · elex woocommerce advanced bulk edit products, prices & attributes10 Eki 2026
- CVE-2026-4080132İzleyin
WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0wordable · wordable10 Eki 2026
- CVE-2026-4080230İzleyin
WordPress Pubjet | پابجت plugin <= 5.4.8 - Settings Change vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0pubjet · pubjet | پابجت10 Eki 2026
- CVE-2026-4080328İzleyin
WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0jotform · jotform – ai chatbot10 Eki 2026
- CVE-2026-4080530İzleyin
WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0peepso · peepso10 Eki 2026
- CVE-2026-4263030İzleyin
WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0web plura · web plura backup & restore manager10 Eki 2026
- CVE-2026-4263128İzleyin
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0qode · qode music10 Eki 2026
- CVE-2026-4263228İzleyin
WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0qode · qode real estate10 Eki 2026
- CVE-2026-4263334İzleyin
WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0marcus · events manager10 Eki 2026
- CVE-2026-4269328İzleyin
WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0tielabs · jannah10 Eki 2026
- CVE-2026-4269640Planlayın
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability
KritikCVSS 10,0İstismar yokEPSS %0royal plugins · sitevault – backup, restore, migration & cloning10 Eki 2026
- CVE-2026-4269728İzleyin
WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0inisev · social share icons & social share buttons10 Eki 2026
- CVE-2026-4269928İzleyin
WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0foliovision · fv player 810 Eki 2026
- CVE-2026-4270228İzleyin
WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themeum · tutor lms10 Eki 2026
- CVE-2026-4270432İzleyin
WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0axiomthemes · kids care10 Eki 2026
- CVE-2026-4270530İzleyin
WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0themegoods · grand news10 Eki 2026
- CVE-2026-4270630İzleyin
WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0themegoods · dk10 Eki 2026
- CVE-2026-4270928İzleyin
WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0radiustheme · food menu – restaurant menu & online ordering for woocommerce10 Eki 2026
- CVE-2026-4271128İzleyin
WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %010web · slider by 10web10 Eki 2026
- CVE-2026-4271234İzleyin
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0qode · qode tours10 Eki 2026
- CVE-2026-4271528İzleyin
WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %010web · photo gallery by 10web10 Eki 2026
- CVE-2026-4271639İzleyin
WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0payever · payever - woocommerce gateway10 Eki 2026
- CVE-2026-4271730İzleyin
WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0vaultdweller · leyka10 Eki 2026
- CVE-2026-4271839İzleyin
WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0pluggabl · booster for woocommerce10 Eki 2026
- CVE-2026-4271939İzleyin
WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0sarah giles · dynamic user directory10 Eki 2026
- CVE-2026-4272230İzleyin
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0shabti kaplan · frontend admin by dynamiapps10 Eki 2026
- CVE-2026-4272339İzleyin
WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0ancorathemes · cleanskin10 Eki 2026
- CVE-2026-4272432İzleyin
WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0ancorathemes · cleanskin10 Eki 2026
- CVE-2026-4277732İzleyin
WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0edge-themes · aalto10 Eki 2026
- CVE-2026-4544030İzleyin
WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0smackcoders inc. · wp ultimate csv importer10 Eki 2026
- CVE-2026-4819332İzleyin
WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0kutethemes · uminex10 Eki 2026
- CVE-2026-4819432İzleyin
WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0kutethemes · dukamarket10 Eki 2026
- CVE-2026-5774228İzleyin
WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themerex group · kids planet10 Eki 2026
- CVE-2026-6202032İzleyin
WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0mikado-themes · touchup10 Eki 2026
- CVE-2026-6202135İzleyin
WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0rascals · angio10 Eki 2026
- CVE-2026-6202239İzleyin
WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0select-themes · tonda membership10 Eki 2026
- CVE-2026-6202439İzleyin
WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability
KritikCVSS 9,9İstismar yokEPSS %0codebard · codebard help desk10 Eki 2026
- CVE-2026-6202536İzleyin
WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability
KritikCVSS 9,0İstismar yokEPSS %0tailored media · tailored tools10 Eki 2026
- CVE-2026-6202728İzleyin
WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bplugins · team section block10 Eki 2026
- CVE-2026-6203028İzleyin
WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0bplugins · streamcast10 Eki 2026
- CVE-2026-6203137İzleyin
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0stylemix · ulisting10 Eki 2026
- CVE-2026-6203239İzleyin
WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability
KritikCVSS 9,8İstismar yokEPSS %0designinvento · directorypress10 Eki 2026
- CVE-2026-6203330İzleyin
WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0stylemix · ulisting10 Eki 2026
- CVE-2026-6203428İzleyin
WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bplugins · before after image comparison – image comparison for wp10 Eki 2026
- CVE-2026-6203728İzleyin
WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bplugins · document embedder10 Eki 2026
- CVE-2026-6203829İzleyin
WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
YüksekCVSS 7,3İstismar yokEPSS %0digitalme · eroom10 Eki 2026
- CVE-2026-6204330İzleyin
WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0sevenspark · contact form 7 – dynamic text extension10 Eki 2026
- CVE-2026-6205039İzleyin
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · splendour10 Eki 2026
- CVE-2026-6205139İzleyin
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · stargaze10 Eki 2026
- CVE-2026-6205239İzleyin
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · tipsy10 Eki 2026
- CVE-2026-6205339İzleyin
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · wine house10 Eki 2026
- CVE-2026-6205439İzleyin
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · yacht rental10 Eki 2026
- CVE-2026-6206428İzleyin
WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bracketweb · ambed10 Eki 2026
- CVE-2026-6206532İzleyin
WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cocobasic · cardea10 Eki 2026
- CVE-2026-6206632İzleyin
WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cocobasic · volos10 Eki 2026
- CVE-2026-6206732İzleyin
WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cocobasic · kaven10 Eki 2026
- CVE-2026-6206832İzleyin
WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cocobasic · teoro10 Eki 2026
- CVE-2026-6206932İzleyin
WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cocobasic · fabius10 Eki 2026
- CVE-2026-6207032İzleyin
WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0ckthemes · flipmart10 Eki 2026
- CVE-2026-6207432İzleyin
WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0themerex · ozeum10 Eki 2026
- CVE-2026-6207532İzleyin
WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0mymoun · backhoe10 Eki 2026
- CVE-2026-6207639İzleyin
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0the4 · kalles10 Eki 2026
- CVE-2026-6207739İzleyin
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0boldthemes · avala10 Eki 2026
- CVE-2026-6208228İzleyin
WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0an-themes · pin wp10 Eki 2026
- CVE-2026-6208639İzleyin
WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · juno10 Eki 2026
- CVE-2026-6208739İzleyin
WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · equadio10 Eki 2026
- CVE-2026-6209039İzleyin
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themerex · wineshop10 Eki 2026
- CVE-2026-6209128İzleyin
WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0kutethemes · armania10 Eki 2026
- CVE-2026-6209232İzleyin
WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0kutethemes · armania10 Eki 2026
- CVE-2026-6209328İzleyin
WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0kutethemes · techone10 Eki 2026
- CVE-2026-6209432İzleyin
WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0kutethemes · techone10 Eki 2026
- CVE-2026-6209528İzleyin
WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0kutethemes · biolife10 Eki 2026
- CVE-2026-6209632İzleyin
WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0kutethemes · biolife10 Eki 2026