Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

5.998 açık

  1. 6,5Orta CVE-2026-116750 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute e4jvikwp VikRentCar Car Rental Management SystemCWE-897 sa önce
  2. 6,4Orta CVE-2026-109370 Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute bplugins Document Embedder – let visitors read files without downloadingCWE-797 sa önce
  3. 9,8Kritik CVE-2026-109218 Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass kleor Contact ManagerCWE-4347 sa önce
  4. 6,4Orta CVE-2026-77871 Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes saadiqbal Post Snippets – Custom WordPress Code Snippets CustomizerCWE-797 sa önce
  5. 6,4Orta CVE-2026-107710 Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title wpmudev Hustle – Email Marketing, Lead Generation, Optins, PopupsCWE-797 sa önce
  6. 5,3Orta CVE-2026-2839 Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints hwk-fr Advanced Custom Fields: ExtendedCWE-8627 sa önce
  7. 5,4Orta CVE-2026-116761 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form jtsternberg CMB2CWE-797 sa önce
  8. 4,4Orta CVE-2026-109988 Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter acowebs Product Addons for Woocommerce – Product Options with Custom FieldsCWE-797 sa önce
  9. 6,4Orta CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute kitae-park Mang BoardCWE-797 sa önce
  10. 6,4Orta CVE-2026-108366 easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute wpdevteam easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring SolutionCWE-797 sa önce
  11. 4,3Orta CVE-2026-116610 Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook hornero Clean LoginCWE-8627 sa önce
  12. 4,3Orta CVE-2026-111213 Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerceCWE-8627 sa önce
  13. 7,2Yüksek CVE-2026-111111 Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape bdthemes Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor AddonsCWE-797 sa önce
  14. 6,1Orta CVE-2026-92098 Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter webheadllc Webheadcoder Multi-Step Forms for Contact Form 7CWE-797 sa önce
  15. 6,4Orta CVE-2026-116749 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute e4jvikwp VikRentCar Car Rental Management SystemCWE-797 sa önce
  16. 4,3Orta CVE-2026-109980 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter barrykooij Related Posts for WordPressCWE-8627 sa önce
  17. 6,4Orta CVE-2026-104729 Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributes themefusion Avada (Fusion) BuilderCWE-797 sa önce
  18. 6,4Orta CVE-2026-118164 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter ifso If-So Dynamic Content – Elementor & All Page Builders PersonalizationCWE-797 sa önce
  19. 8,8Yüksek CVE-2026-109384 The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Conf… melograno The Innovative Form Builder – IvyFormsCWE-4347 sa önce
  20. 5,4Orta CVE-2026-100175 Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink wayneallen-1 PostieCWE-797 sa önce
  21. 6,4Orta CVE-2026-77188 Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute xootix Waitlist Woocommerce ( Back in stock notifier )CWE-797 sa önce
  22. 6,5Orta CVE-2026-110020 Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclos… widgetpack Rich Showcase for Google ReviewsCWE-8627 sa önce
  23. 8,8Yüksek CVE-2026-111120 VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task e4jvikwp VikRentCar Car Rental Management SystemCWE-3527 sa önce
  24. 4,3Orta CVE-2026-109979 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter barrykooij Related Posts for WordPressCWE-8627 sa önce
  25. 6,4Orta CVE-2026-104740 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute ifso If-So Dynamic Content – Elementor & All Page Builders PersonalizationCWE-797 sa önce