Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
6.458 kayıt · 12 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 9 / 65
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-39785İstismar yok | WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerabilityserhii pasyuk · gmedia photo gallery · CWE-89 | Kritik9,3 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-39790İstismar yok | WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · vikrentcar · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
34İzleyin | CVE-2026-39792İstismar yok | WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerabilitymitchell bennis · simple file list · CWE-22 | Yüksek8,6 | — | %0,3 | 6 Eki 2026 |
35İzleyin | CVE-2026-39793İstismar yok | WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerabilitynicu micle · simple jwt login · CWE-288 | Yüksek8,8 | — | %0,4 | 6 Eki 2026 |
30İzleyin | CVE-2026-39794İstismar yok | WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerabilitywc lovers · woocommerce multivendor marketplace – rest api · CWE-862 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
37İzleyin | CVE-2026-39795İstismar yok | WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerabilitybrewlabs · sendpress newsletters · CWE-89 | Kritik9,3 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-39796İstismar yok | WordPress Advanced Posts Listing – Show Post List Easily plugin <= 1.0.8 - Broken Access Control vulnerabilityflipper code – wordpress development company · advanced posts listing – show post list easily · CWE-862 | Yüksek7,5 | — | %0,2 | 6 Eki 2026 |
39İzleyin | CVE-2026-39797İstismar yok | WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerabilitydata443 risk mitigation, inc. · gdpr framework by data443 · CWE-502 | Kritik9,8 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-40806İstismar yok | WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityplugin devs · blog, posts and category filter for elementor · CWE-79 | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-40807İstismar yok | WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerabilityaman · cf7 views – complete entry management for contact form 7 · CWE-79 | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
37İzleyin | CVE-2026-41555İstismar yok | WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerabilityweblizar – wordpress themes & plugin · newsletter subscription form – user subscriptions form, capture email · CWE-89 | Kritik9,3 | — | %0,2 | 6 Eki 2026 |
30İzleyin | CVE-2026-41559İstismar yok | WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerabilitypluginjoy · safesnap – verified wordpress backup & restore · CWE-201 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-41560İstismar yok | WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerabilitywxdlabs · wxd backup lite · CWE-862 | Yüksek7,5 | — | %0,2 | 6 Eki 2026 |
30İzleyin | CVE-2026-41561İstismar yok | WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerabilityadrian lin · museder restoreone · CWE-201 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-41562İstismar yok | WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilitynorvisgabriel · norvis backup · CWE-201 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-42413İstismar yok | WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerabilitydaftplug · snapshotify – all-in-one backup & restore & migrate · CWE-201 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
34İzleyin | CVE-2026-42414İstismar yok | WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerabilitycridiostudio · listingpro · CWE-89 | Yüksek8,5 | — | %0,2 | 6 Eki 2026 |
37İzleyin | CVE-2026-42415İstismar yok | WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerabilityp-themes · porto theme - functionality · CWE-89 | Kritik9,3 | — | %0,2 | 6 Eki 2026 |
34İzleyin | CVE-2026-42416İstismar yok | WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerabilityandondesign · udesign core · CWE-89 | Yüksek8,5 | — | %0,2 | 6 Eki 2026 |
37İzleyin | CVE-2026-42417İstismar yok | WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerabilityreputeinfosystems · armember premium · CWE-89 | Kritik9,3 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-42418İstismar yok | WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilitysocialrocket · social rocket · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-42634İstismar yok | WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilitybplugins · video background block – use video as background in the section. · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-42635İstismar yok | WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerabilitywpgenie · woocommerce simple auctions · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-42636İstismar yok | WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerabilitywp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
30İzleyin | CVE-2026-42638İstismar yok | WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerabilitysyed balkhi · easy digital downloads · CWE-862 | Yüksek7,5 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-48197İstismar yok | WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerabilitypublishpress · publishpress capabilities · CWE-266 | Yüksek7,2 | — | %0,4 | 6 Eki 2026 |
30İzleyin | CVE-2026-48199İstismar yok | WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerabilitybeplusthemes · sermon'e · CWE-862 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
31İzleyin | CVE-2026-4889İstismar yok | SQL Injection (SQLi) in eLoanApp Platform by RDL Technologiesrdl technologies · eloanapp platform · CWE-89 | Yüksek7,8 | — | %0,2 | 6 Eki 2026 |
35İzleyin | CVE-2026-62072İstismar yok | WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerabilityprogress planner · progress planner · CWE-862 | Yüksek8,8 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-94675İstismar yok | WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerabilityfluent forms free vs pro · fluent forms pro add on pack · CWE-79 | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
32İzleyin | CVE-2026-95105İstismar yok | Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingdanielberkompas · cloak · CWE-649 | Yüksek8,2 | — | %0,1 | 6 Eki 2026 |
29İzleyin | CVE-2026-95526İstismar yok | WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerabilityrealmag777 · bear · CWE-862 | Yüksek7,3 | — | %0,2 | 6 Eki 2026 |
32İzleyin | CVE-2026-95594İstismar yok | WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerabilitycozy vision technologies pvt. ltd. · sms alert order notifications · CWE-266 | Yüksek8,1 | — | %0,2 | 6 Eki 2026 |
31İzleyin | CVE-2026-98166İstismar yok | drm/ttm: fix swapped-out resources never leaving their bulk_move rangelinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98169İstismar yok | smb: client: fix potential OOB read in smb3_enum_snapshots()linux · linux | Yüksek7,1 | — | %0,4 | 6 Eki 2026 |
35İzleyin | CVE-2026-98171İstismar yok | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUslinux · linux | Yüksek8,8 | — | %0,5 | 6 Eki 2026 |
30İzleyin | CVE-2026-98173İstismar yok | smb: client: fix use-after-free of iface in cifs_try_adding_channels()linux · linux | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-98174İstismar yok | smb: client: fix rlist race and missing initializationlinux · linux | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-98175İstismar yok | smb: client: cancel reconnect work in clean_demultiplex_info()linux · linux | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-98180Kavram kanıtı | drm/msm: RCU-free the scheduler-containing ring and VM objectslinux · linux | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98197İstismar yok | hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on removelinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98216İstismar yok | IB/hfi1: Fix the PIO_CRED credit-return mmaplinux · linux | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98228İstismar yok | mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98229İstismar yok | xfrm: save input state data before secpath resetslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98230İstismar yok | xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputlinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
32İzleyin | CVE-2026-98239İstismar yok | net: lan743x: fix RX checksum use-after-freelinux · linux | Yüksek8,1 | — | %0,4 | 6 Eki 2026 |
31İzleyin | CVE-2026-98241İstismar yok | ipv6: xfrm: use full sockets in local error pathslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98243İstismar yok | dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3linux · linux | Yüksek7,1 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98251İstismar yok | openvswitch: avoid reallocating confirmed conntrack labelslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98252İstismar yok | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()linux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98253İstismar yok | RDMA/ucma: Serialize join and leave on copy_to_user failurelinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98254İstismar yok | swiotlb: use the adjusted address for the highmem page lookuplinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98256Kavram kanıtı | signal: Prevent exec() racelinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
30İzleyin | CVE-2026-98257İstismar yok | rds: ib: use rds_conn_drop() on protocol version mismatchlinux · linux | Yüksek7,5 | — | %0,5 | 6 Eki 2026 |
31İzleyin | CVE-2026-98258İstismar yok | posix-cpu-timers: Prevent freeing a timer which is queued on the expiry listlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98260Kavram kanıtı | exec: Cleanup POSIX timers right after de_thread()linux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
32İzleyin | CVE-2026-98261İstismar yok | cifs: Fix server use-after-free in cifs_chan_skip_or_disable()linux · linux | Yüksek8,1 | — | %0,4 | 6 Eki 2026 |
31İzleyin | CVE-2026-98276İstismar yok | net: lock the socket in sock_gettstamp()linux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98281İstismar yok | futex: Also allocate private hash on vfork()linux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
35İzleyin | CVE-2026-98282İstismar yok | powerpc/iommu: Fix the overflow validation in iommu_tce_check_iobalinux · linux | Yüksek8,8 | — | %0,1 | 6 Eki 2026 |
35İzleyin | CVE-2026-98283İstismar yok | KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()linux · linux | Yüksek8,8 | — | %0,1 | 6 Eki 2026 |
30İzleyin | CVE-2026-98290İstismar yok | Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanuplinux · linux | Yüksek7,5 | — | %0,2 | 6 Eki 2026 |
31İzleyin | CVE-2026-98305İstismar yok | net: dsa: mxl862xx: disable the stats poll on teardownlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98311İstismar yok | wifi: virt_wifi: don't transfer operstate before registerlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98315İstismar yok | ntfs: protect runlist updates with the runlist locklinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98318İstismar yok | smb: client: validate absolute native symlink targets before NT fixupslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98320İstismar yok | netfilter: flowtable: hold reference on ct until flow is releasedlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
39İzleyin | CVE-2026-98323İstismar yok | RDMA/siw: Bound fragmented header copies by the remaining lengthlinux · linux | Kritik9,8 | — | %0,5 | 6 Eki 2026 |
31İzleyin | CVE-2026-98324İstismar yok | dmaengine: pxa: fix double counting of the hw descriptorslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98330İstismar yok | wifi: cfg80211: get the wiphy out of a dying network namespacelinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98331İstismar yok | wifi: mac80211: unlist vifs when their netdev is unregisteredlinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
35İzleyin | CVE-2026-98339İstismar yok | wifi: cfg80211: don't filter by BSS type when removing stale entrieslinux · linux | Yüksek8,8 | — | %0,2 | 6 Eki 2026 |
31İzleyin | CVE-2026-98341İstismar yok | wifi: cfg80211: don't free driver-owned scan requestslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98348İstismar yok | wifi: libipw: reject too-short association responseslinux · linux | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-98349İstismar yok | wifi: libipw: reject too-short beacon and probe responseslinux · linux | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
32İzleyin | CVE-2026-98357İstismar yok | IB/isert: wait for deferred control PDU completions before releasing the connectionlinux · linux | Yüksek8,1 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-98359İstismar yok | RDMA/core: Reject unregistering netdevs in ib_get_eth_speedlinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-98360İstismar yok | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedslinux · linux | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98361İstismar yok | RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write pathslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98364İstismar yok | xfrm: hold net_device reference under RCU in bundle creationlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
39İzleyin | CVE-2026-98365İstismar yok | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB accesslinux · linux | Kritik9,8 | — | %0,3 | 6 Eki 2026 |
31İzleyin | CVE-2026-98366İstismar yok | RDMA/rxe: validate access flags before swapping the MR's PDlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98367İstismar yok | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_acceptlinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98368İstismar yok | esp: downgrade zerocopy managed frags before mutating skb fragslinux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
31İzleyin | CVE-2026-98369İstismar yok | xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()linux · linux | Yüksek7,8 | — | %0,1 | 6 Eki 2026 |
28İzleyin | CVE-2026-84854İstismar yok | Out of Bound Write on WibuKey for Windowswibu-systems-ag · wibukey · CWE-787 | Yüksek7,0 | — | %0,1 | 6 Eki 2026 |
30İzleyin | CVE-2026-103831İstismar yok | Insecure deserialization in the TrueLayer Magento 2 plugintruelayer · truelayer magento 2 plugin · CWE-502 | Yüksek7,5 | — | %0,1 | 6 Eki 2026 |
34İzleyin | CVE-2026-105985İstismar yok | Authenticated RCE via render-components Entry Type overridescraftcms · cms · CWE-1336 | Yüksek8,7 | — | %0,6 | 6 Eki 2026 |
28İzleyin | CVE-2026-105834İstismar yok | Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Sourcerundeck · rundeck · CWE-22 | Yüksek7,1 | — | %0,3 | 6 Eki 2026 |
36İzleyin | CVE-2026-105835İstismar yok | PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpointplanka · planka · CWE-307 | Kritik9,1 | — | %0,3 | 6 Eki 2026 |
39İzleyin | CVE-2026-106016İstismar yok | Mitigation bypass in the File Handling componentmozilla · firefox · CWE-693 | Kritik9,8 | — | %0,3 | 6 Eki 2026 |
36İzleyin | CVE-2026-82531Kavram kanıtı | Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cachesmarty-php · smarty · CWE-94 | Kritik9,2 | — | %0,8 | 6 Eki 2026 |
35İzleyin | CVE-2026-105788İstismar yok | Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_appmicrosoft · ufo · CWE-78 | Yüksek8,8 | — | %1,0 | 6 Eki 2026 |
34İzleyin | CVE-2026-105837İstismar yok | libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflowsezero · libmikmod · CWE-190 | Yüksek8,5 | — | %0,1 | 6 Eki 2026 |
34İzleyin | CVE-2026-105839İstismar yok | libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBODsezero · libmikmod · CWE-190 | Yüksek8,5 | — | %0,1 | 6 Eki 2026 |
30İzleyin | CVE-2026-105840İstismar yok | lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath()uwe ohse · lrzsz · CWE-22 | Yüksek7,7 | — | %0,3 | 6 Eki 2026 |
30İzleyin | CVE-2026-105841İstismar yok | lrzsz before 0.13.0 OS Command Injection via lrz Pipe Modeuwe ohse · lrzsz · CWE-78 | Yüksek7,7 | — | %0,9 | 6 Eki 2026 |
37İzleyin | CVE-2026-106037İstismar yok | Mooncake through 0.3.13.post1 Missing Authentication in Store REST Servicekvcache-ai · mooncake · CWE-306 | Kritik9,3 | — | %0,7 | 6 Eki 2026 |
35İzleyin | CVE-2026-106038İstismar yok | Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCskvcache-ai · mooncake · CWE-306 | Yüksek8,8 | — | %0,4 | 6 Eki 2026 |
35İzleyin | CVE-2026-106040İstismar yok | Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPCkvcache-ai · mooncake · CWE-862 | Yüksek8,8 | — | %0,3 | 6 Eki 2026 |
- CVE-2026-3978537İzleyin
WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0serhii pasyuk · gmedia photo gallery6 Eki 2026
- CVE-2026-3979028İzleyin
WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0e4jvikwp · vikrentcar6 Eki 2026
- CVE-2026-3979234İzleyin
WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0mitchell bennis · simple file list6 Eki 2026
- CVE-2026-3979335İzleyin
WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0nicu micle · simple jwt login6 Eki 2026
- CVE-2026-3979430İzleyin
WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wc lovers · woocommerce multivendor marketplace – rest api6 Eki 2026
- CVE-2026-3979537İzleyin
WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0brewlabs · sendpress newsletters6 Eki 2026
- CVE-2026-3979630İzleyin
WordPress Advanced Posts Listing – Show Post List Easily plugin <= 1.0.8 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0flipper code – wordpress development company · advanced posts listing – show post list easily6 Eki 2026
- CVE-2026-3979739İzleyin
WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0data443 risk mitigation, inc. · gdpr framework by data4436 Eki 2026
- CVE-2026-4080628İzleyin
WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0plugin devs · blog, posts and category filter for elementor6 Eki 2026
- CVE-2026-4080728İzleyin
WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0aman · cf7 views – complete entry management for contact form 76 Eki 2026
- CVE-2026-4155537İzleyin
WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0weblizar – wordpress themes & plugin · newsletter subscription form – user subscriptions form, capture email6 Eki 2026
- CVE-2026-4155930İzleyin
WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0pluginjoy · safesnap – verified wordpress backup & restore6 Eki 2026
- CVE-2026-4156030İzleyin
WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wxdlabs · wxd backup lite6 Eki 2026
- CVE-2026-4156130İzleyin
WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0adrian lin · museder restoreone6 Eki 2026
- CVE-2026-4156230İzleyin
WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0norvisgabriel · norvis backup6 Eki 2026
- CVE-2026-4241330İzleyin
WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0daftplug · snapshotify – all-in-one backup & restore & migrate6 Eki 2026
- CVE-2026-4241434İzleyin
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0cridiostudio · listingpro6 Eki 2026
- CVE-2026-4241537İzleyin
WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0p-themes · porto theme - functionality6 Eki 2026
- CVE-2026-4241634İzleyin
WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0andondesign · udesign core6 Eki 2026
- CVE-2026-4241737İzleyin
WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0reputeinfosystems · armember premium6 Eki 2026
- CVE-2026-4241828İzleyin
WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0socialrocket · social rocket6 Eki 2026
- CVE-2026-4263428İzleyin
WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bplugins · video background block – use video as background in the section.6 Eki 2026
- CVE-2026-4263528İzleyin
WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpgenie · woocommerce simple auctions6 Eki 2026
- CVE-2026-4263628İzleyin
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent6 Eki 2026
- CVE-2026-4263830İzleyin
WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0syed balkhi · easy digital downloads6 Eki 2026
- CVE-2026-4819728İzleyin
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0publishpress · publishpress capabilities6 Eki 2026
- CVE-2026-4819930İzleyin
WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0beplusthemes · sermon'e6 Eki 2026
- CVE-2026-488931İzleyin
SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies
YüksekCVSS 7,8İstismar yokEPSS %0rdl technologies · eloanapp platform6 Eki 2026
- CVE-2026-6207235İzleyin
WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0progress planner · progress planner6 Eki 2026
- CVE-2026-9467528İzleyin
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0fluent forms free vs pro · fluent forms pro add on pack6 Eki 2026
- CVE-2026-9510532İzleyin
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
YüksekCVSS 8,2İstismar yokEPSS %0danielberkompas · cloak6 Eki 2026
- CVE-2026-9552629İzleyin
WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability
YüksekCVSS 7,3İstismar yokEPSS %0realmag777 · bear6 Eki 2026
- CVE-2026-9559432İzleyin
WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0cozy vision technologies pvt. ltd. · sms alert order notifications6 Eki 2026
- CVE-2026-9816631İzleyin
drm/ttm: fix swapped-out resources never leaving their bulk_move range
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9816928İzleyin
smb: client: fix potential OOB read in smb3_enum_snapshots()
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9817135İzleyin
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9817330İzleyin
smb: client: fix use-after-free of iface in cifs_try_adding_channels()
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9817430İzleyin
smb: client: fix rlist race and missing initialization
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9817530İzleyin
smb: client: cancel reconnect work in clean_demultiplex_info()
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9818028İzleyin
drm/msm: RCU-free the scheduler-containing ring and VM objects
YüksekCVSS 7,1Kavram kanıtıEPSS %0linux · linux6 Eki 2026
- CVE-2026-9819728İzleyin
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9821628İzleyin
IB/hfi1: Fix the PIO_CRED credit-return mmap
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9822831İzleyin
mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9822931İzleyin
xfrm: save input state data before secpath resets
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9823028İzleyin
xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9823932İzleyin
net: lan743x: fix RX checksum use-after-free
YüksekCVSS 8,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9824131İzleyin
ipv6: xfrm: use full sockets in local error paths
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9824328İzleyin
dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825131İzleyin
openvswitch: avoid reallocating confirmed conntrack labels
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825228İzleyin
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825331İzleyin
RDMA/ucma: Serialize join and leave on copy_to_user failure
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825431İzleyin
swiotlb: use the adjusted address for the highmem page lookup
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825631İzleyin
signal: Prevent exec() race
YüksekCVSS 7,8Kavram kanıtıEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825730İzleyin
rds: ib: use rds_conn_drop() on protocol version mismatch
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9825831İzleyin
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9826031İzleyin
exec: Cleanup POSIX timers right after de_thread()
YüksekCVSS 7,8Kavram kanıtıEPSS %0linux · linux6 Eki 2026
- CVE-2026-9826132İzleyin
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
YüksekCVSS 8,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9827631İzleyin
net: lock the socket in sock_gettstamp()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9828131İzleyin
futex: Also allocate private hash on vfork()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9828235İzleyin
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9828335İzleyin
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9829030İzleyin
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9830531İzleyin
net: dsa: mxl862xx: disable the stats poll on teardown
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9831131İzleyin
wifi: virt_wifi: don't transfer operstate before register
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9831531İzleyin
ntfs: protect runlist updates with the runlist lock
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9831831İzleyin
smb: client: validate absolute native symlink targets before NT fixups
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9832031İzleyin
netfilter: flowtable: hold reference on ct until flow is released
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9832339İzleyin
RDMA/siw: Bound fragmented header copies by the remaining length
KritikCVSS 9,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9832431İzleyin
dmaengine: pxa: fix double counting of the hw descriptors
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9833028İzleyin
wifi: cfg80211: get the wiphy out of a dying network namespace
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9833128İzleyin
wifi: mac80211: unlist vifs when their netdev is unregistered
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9833935İzleyin
wifi: cfg80211: don't filter by BSS type when removing stale entries
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9834131İzleyin
wifi: cfg80211: don't free driver-owned scan requests
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9834828İzleyin
wifi: libipw: reject too-short association responses
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9834928İzleyin
wifi: libipw: reject too-short beacon and probe responses
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9835732İzleyin
IB/isert: wait for deferred control PDU completions before releasing the connection
YüksekCVSS 8,1İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9835928İzleyin
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836028İzleyin
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836131İzleyin
RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836431İzleyin
xfrm: hold net_device reference under RCU in bundle creation
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836539İzleyin
RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
KritikCVSS 9,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836631İzleyin
RDMA/rxe: validate access flags before swapping the MR's PD
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836731İzleyin
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836831İzleyin
esp: downgrade zerocopy managed frags before mutating skb frags
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-9836931İzleyin
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Eki 2026
- CVE-2026-8485428İzleyin
Out of Bound Write on WibuKey for Windows
YüksekCVSS 7,0İstismar yokEPSS %0wibu-systems-ag · wibukey6 Eki 2026
- CVE-2026-10383130İzleyin
Insecure deserialization in the TrueLayer Magento 2 plugin
YüksekCVSS 7,5İstismar yokEPSS %0truelayer · truelayer magento 2 plugin6 Eki 2026
- CVE-2026-10598534İzleyin
Authenticated RCE via render-components Entry Type overrides
YüksekCVSS 8,7İstismar yokEPSS %0craftcms · cms6 Eki 2026
- CVE-2026-10583428İzleyin
Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source
YüksekCVSS 7,1İstismar yokEPSS %0rundeck · rundeck6 Eki 2026
- CVE-2026-10583536İzleyin
PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint
KritikCVSS 9,1İstismar yokEPSS %0planka · planka6 Eki 2026
- CVE-2026-10601639İzleyin
Mitigation bypass in the File Handling component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox6 Eki 2026
- CVE-2026-8253136İzleyin
Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache
KritikCVSS 9,2Kavram kanıtıEPSS %0smarty-php · smarty6 Eki 2026
- CVE-2026-10578835İzleyin
Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · ufo6 Eki 2026
- CVE-2026-10583734İzleyin
libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow
YüksekCVSS 8,5İstismar yokEPSS %0sezero · libmikmod6 Eki 2026
- CVE-2026-10583934İzleyin
libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD
YüksekCVSS 8,5İstismar yokEPSS %0sezero · libmikmod6 Eki 2026
- CVE-2026-10584030İzleyin
lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath()
YüksekCVSS 7,7İstismar yokEPSS %0uwe ohse · lrzsz6 Eki 2026
- CVE-2026-10584130İzleyin
lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode
YüksekCVSS 7,7İstismar yokEPSS %0uwe ohse · lrzsz6 Eki 2026
- CVE-2026-10603737İzleyin
Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service
KritikCVSS 9,3İstismar yokEPSS %0kvcache-ai · mooncake6 Eki 2026
- CVE-2026-10603835İzleyin
Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs
YüksekCVSS 8,8İstismar yokEPSS %0kvcache-ai · mooncake6 Eki 2026
- CVE-2026-10604035İzleyin
Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC
YüksekCVSS 8,8İstismar yokEPSS %0kvcache-ai · mooncake6 Eki 2026