İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

5.224 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 8 / 53

  • CVE-2026-105761
    28İzleyin

    Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

    YüksekCVSS 7,1İstismar yokEPSS %0

    langgenius · dify5 Eki 2026

  • CVE-2026-105762
    33İzleyin

    Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint

    YüksekCVSS 8,3İstismar yokEPSS %0

    langgenius · dify6 Eki 2026

  • CVE-2026-105763
    38İzleyin

    Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

    KritikCVSS 9,6İstismar yokEPSS %0

    twentyhq · twenty6 Eki 2026

  • CVE-2026-105764
    30İzleyin

    Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

    YüksekCVSS 7,7İstismar yokEPSS %0

    immich-app · immich6 Eki 2026

  • CVE-2026-105782
    30İzleyin

    Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware

    YüksekCVSS 7,5İstismar yokEPSS %0

    scrapy · scrapy6 Eki 2026

  • CVE-2026-105783
    32İzleyin

    Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

    YüksekCVSS 8,0İstismar yokEPSS %0

    laurent22 · joplin6 Eki 2026

  • CVE-2026-105786
    34İzleyin

    Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier

    YüksekCVSS 8,5İstismar yokEPSS %0

    laurent22 · joplin6 Eki 2026

  • CVE-2026-82988
    30İzleyin

    There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated atta

    YüksekCVSS 7,5İstismar yokEPSS %0

    viewsonic · vcast6 Eki 2026

  • CVE-2026-82989
    39İzleyin

    There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to injec

    KritikCVSS 9,8İstismar yokEPSS %0

    viewsonic · vcast6 Eki 2026

  • CVE-2026-105484
    41Planlayın

    TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

    KritikCVSS 10,0İstismar yokEPSS %2

    totolink · x6000r6 Eki 2026

  • CVE-2026-105072
    30İzleyin

    WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp manage ninja · fluentbooking pro6 Eki 2026

  • CVE-2026-39723
    30İzleyin

    WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    green invoice · morning for woocommerce6 Eki 2026

  • CVE-2026-39760
    28İzleyin

    WordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    creative interactive media · real 3d flipbook6 Eki 2026

  • CVE-2026-39789
    30İzleyin

    WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp manage ninja · fluent affiliate pro6 Eki 2026

  • CVE-2026-41558
    30İzleyin

    WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp synchro · wp migration plugin db & files – wp synchro6 Eki 2026

  • CVE-2026-41563
    30İzleyin

    WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    dawer drew · sitemovr6 Eki 2026

  • CVE-2026-75962
    28İzleyin

    Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)

    YüksekCVSS 7,2İstismar yokEPSS %0

    saadiqbal · post smtp – complete email delivery and smtp solution with email logs, alerts, backup smtp & mobile app6 Eki 2026

  • CVE-2026-105701
    35İzleyin

    ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template

    YüksekCVSS 8,8İstismar yokEPSS %0

    mauro cassani · acpt (premium)6 Eki 2026

  • CVE-2026-105778
    34İzleyin

    Tenda AC5 Wifi setWifi stack-based overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    tenda · ac56 Eki 2026

  • CVE-2026-25267
    31İzleyin

    Missing Authorization in Core

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · qca6698au firmware6 Eki 2026

  • CVE-2026-25291
    31İzleyin

    Use After Free in Graphics

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · sar1165p firmware6 Eki 2026

  • CVE-2026-25302
    28İzleyin

    Improper Verification of Cryptographic Signature in Boot

    YüksekCVSS 7,1İstismar yokEPSS %0

    qualcomm · xrv9209 firmware6 Eki 2026

  • CVE-2026-57537
    31İzleyin

    Use After Free in DSP Service

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · congo firmware6 Eki 2026

  • CVE-2026-57545
    31İzleyin

    Untrusted Pointer Dereference in Graphics

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · snapdragon g1 gen 2 gaming platform firmware6 Eki 2026

  • CVE-2026-57546
    30İzleyin

    Buffer Over-read in WLAN HAL

    YüksekCVSS 7,5İstismar yokEPSS %0

    qualcomm · congo firmware6 Eki 2026

  • CVE-2026-57554
    31İzleyin

    Use After Free in DSP Service

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · snapdragon g1 gen 2 gaming platform firmware6 Eki 2026

  • CVE-2026-57555
    31İzleyin

    Use After Free in DSP Service

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · cologne firmware6 Eki 2026

  • CVE-2026-57559
    31İzleyin

    Use After Free in DSP_Services

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · cologne firmware6 Eki 2026

  • CVE-2026-59358
    30İzleyin

    UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    cloud foundry · uaa6 Eki 2026

  • CVE-2026-94293
    37İzleyin

    Missing authentication for critical function in the aas-edge-client REST API

    KritikCVSS 9,3İstismar yokEPSS %0

    murrelektronik · software aas edge client all versions6 Eki 2026

  • CVE-2026-85153
    37İzleyin

    Information Disclosure Vulnerability in Schmooze dating mobile Application

    KritikCVSS 9,3İstismar yokEPSS %0

    schmooze · schmooze dating mobile application6 Eki 2026

  • CVE-2026-102387
    30İzleyin

    WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    xserver · xserver migrator6 Eki 2026

  • CVE-2026-102915
    34İzleyin

    WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    marco van wieren · wpo3656 Eki 2026

  • CVE-2026-103346
    28İzleyin

    WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    tomlister · payflex payment gateway6 Eki 2026

  • CVE-2026-104385
    30İzleyin

    WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    adrian tobey · groundhogg6 Eki 2026

  • CVE-2026-104387
    28İzleyin

    WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    blubrry · powerpress podcasting6 Eki 2026

  • CVE-2026-104394
    28İzleyin

    WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    syed balkhi · charitable6 Eki 2026

  • CVE-2026-104395
    28İzleyin

    WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    picu · picu6 Eki 2026

  • CVE-2026-104405
    32İzleyin

    WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    nexcess · givewp6 Eki 2026

  • CVE-2026-104406
    29İzleyin

    WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    picu · picu6 Eki 2026

  • CVE-2026-104670
    28İzleyin

    WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    thimpress · learnpress6 Eki 2026

  • CVE-2026-104672
    28İzleyin

    WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nexcess · givewp6 Eki 2026

  • CVE-2026-104747
    32İzleyin

    WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    edge-themes · haaken6 Eki 2026

  • CVE-2026-104757
    28İzleyin

    WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    javier carazo · import and export users and customers6 Eki 2026

  • CVE-2026-104814
    28İzleyin

    WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    epiphyt · form block6 Eki 2026

  • CVE-2026-105058
    35İzleyin

    WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    john james jacoby · wp user profiles6 Eki 2026

  • CVE-2026-105061
    28İzleyin

    WordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bởi brandtoss · wp mailster6 Eki 2026

  • CVE-2026-105070
    35İzleyin

    WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    dimitri grassi · salon booking system6 Eki 2026

  • CVE-2026-105071
    30İzleyin

    WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    royal plugins · sitevault – backup, restore, migration &amp; cloning6 Eki 2026

  • CVE-2026-105317
    34İzleyin

    WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    cozmoslabs · paid member subscriptions6 Eki 2026

  • CVE-2026-25433
    28İzleyin

    WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    tobias @saleswonder.biz · wp2leads6 Eki 2026

  • CVE-2026-25434
    34İzleyin

    WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    tobias @saleswonder.biz · wp2leads6 Eki 2026

  • CVE-2026-32557
    37İzleyin

    WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    bot verification bookingwp.com: verifying that you are not a robot... · woocommerce appointments6 Eki 2026

  • CVE-2026-32568
    39İzleyin

    WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    jmaplugins · woocommerce designer pro6 Eki 2026

  • CVE-2026-32569
    28İzleyin

    WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    joomunited · wp media folder6 Eki 2026

  • CVE-2026-32570
    28İzleyin

    WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    daftplug · progressify - progressive web app (pwa)6 Eki 2026

  • CVE-2026-32572
    28İzleyin

    WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wedevs · wp user frontend pro6 Eki 2026

  • CVE-2026-32574
    28İzleyin

    WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    edgarrojas · smart forms6 Eki 2026

  • CVE-2026-32575
    28İzleyin

    WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    fantastic plugins · sumo affiliates pro6 Eki 2026

  • CVE-2026-32577
    28İzleyin

    WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    n-media · frontend file manager6 Eki 2026

  • CVE-2026-32578
    28İzleyin

    WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    techsupport · ecpay ecommerce for woocommerce6 Eki 2026

  • CVE-2026-32579
    40Planlayın

    WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    kognetiks · kognetiks chatbot for wordpress6 Eki 2026

  • CVE-2026-32580
    30İzleyin

    WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpgenie · woocommerce lottery6 Eki 2026

  • CVE-2026-32581
    28İzleyin

    WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    mooberrydreams · mooberry book manager6 Eki 2026

  • CVE-2026-39719
    28İzleyin

    WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    deknows · pdf smart viewer for elementor6 Eki 2026

  • CVE-2026-39720
    28İzleyin

    WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    mapster · mapster wp maps6 Eki 2026

  • CVE-2026-39722
    28İzleyin

    WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    vibethemes · wplms6 Eki 2026

  • CVE-2026-39724
    28İzleyin

    WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    veppa · http requests manager6 Eki 2026

  • CVE-2026-39726
    28İzleyin

    WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lumise neo · lumise product designer6 Eki 2026

  • CVE-2026-39728
    28İzleyin

    WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    instapagedev · instapage plugin6 Eki 2026

  • CVE-2026-39729
    28İzleyin

    WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wisdmlabs · edwiser bridge6 Eki 2026

  • CVE-2026-39730
    28İzleyin

    WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    marcin · wise chat6 Eki 2026

  • CVE-2026-39731
    28İzleyin

    WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    code4life · database for cf76 Eki 2026

  • CVE-2026-39745
    28İzleyin

    WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bestweblayout · contact form to db by bestwebsoft6 Eki 2026

  • CVE-2026-39746
    37İzleyin

    WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    fs-code · booknetic6 Eki 2026

  • CVE-2026-39747
    34İzleyin

    WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wofficeio · woffice6 Eki 2026

  • CVE-2026-39748
    28İzleyin

    WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    thememove · edumall6 Eki 2026

  • CVE-2026-39750
    28İzleyin

    WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS)

    YüksekCVSS 7,1İstismar yokEPSS %0

    wedevs · storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cart6 Eki 2026

  • CVE-2026-39751
    30İzleyin

    WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    payplug · payplug for woocommerce (official)6 Eki 2026

  • CVE-2026-39752
    30İzleyin

    WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    blueglass interactive ag · jobs for wordpress6 Eki 2026

  • CVE-2026-39753
    39İzleyin

    WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    amentotech · taskbot6 Eki 2026

  • CVE-2026-39755
    39İzleyin

    WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    revmakx · wp duplicate6 Eki 2026

  • CVE-2026-39757
    39İzleyin

    WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    amentotech · taskbot6 Eki 2026

  • CVE-2026-39758
    28İzleyin

    WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    midtrans · midtrans-woocommerce6 Eki 2026

  • CVE-2026-39759
    39İzleyin

    WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    amentotech · workreap core6 Eki 2026

  • CVE-2026-39761
    39İzleyin

    WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    elightup · meta box aio6 Eki 2026

  • CVE-2026-39764
    37İzleyin

    WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    radiustheme · radius booking — booking calendar for appointments &amp; services6 Eki 2026

  • CVE-2026-39765
    28İzleyin

    WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    webappick · challan6 Eki 2026

  • CVE-2026-39766
    28İzleyin

    WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    reputeinfosystems · arforms6 Eki 2026

  • CVE-2026-39769
    30İzleyin

    WordPress Graphina plugin <= 3.1.12 - Broken Authentication vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    iqonic design · graphina6 Eki 2026

  • CVE-2026-39770
    40Planlayın

    WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    amentotech · doctreat6 Eki 2026

  • CVE-2026-39771
    34İzleyin

    WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    mightynetworks vs buddyboss · buddyboss platform6 Eki 2026

  • CVE-2026-39773
    40Planlayın

    WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    amentotech · doctreat core6 Eki 2026

  • CVE-2026-39774
    35İzleyin

    WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    tourfic ai studio · tourfic pro6 Eki 2026

  • CVE-2026-39775
    35İzleyin

    WordPress JobZilla - Job Board WordPress Theme theme <= 2.2 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    dexignzone · jobzilla - job board wordpress theme6 Eki 2026

  • CVE-2026-39776
    32İzleyin

    WordPress Tabs plugin <= 2.5 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %0

    wpshopmart · tabs6 Eki 2026

  • CVE-2026-39778
    28İzleyin

    WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themeansar · ansar import – one click starter sites – for elementor &amp; themes6 Eki 2026

  • CVE-2026-39780
    28İzleyin

    WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    youzify · youzify6 Eki 2026

  • CVE-2026-39781
    28İzleyin

    WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    dan rossiter · document gallery6 Eki 2026

  • CVE-2026-39784
    28İzleyin

    WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nicdark · hotel booking6 Eki 2026