Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.

Filtreler

2.215 açık

  1. 6,4Orta CVE-2026-103370 Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion awesomesupport Awesome Support – WordPress HelpDesk & Support PluginCWE-791 gün önce
  2. 6,5Orta CVE-2026-116609 WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute osamaesh WP Visitor Statistics (Real Time Traffic)CWE-891 gün önce
  3. 6,8Orta CVE-2026-115281Yama var Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute Recipe Card Blocks LiteCWE-891 gün önce
  4. 5,3Orta CVE-2026-115255Yama var WP Roster < 2.35 - Unauthenticated Roster Member Deletion WP RosterCWE-2841 gün önce
  5. 5,8Orta CVE-2026-115225Yama var Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup Customer Engagement SystemCWE-9181 gün önce
  6. 4,1Orta CVE-2026-115224Yama var Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding Customer Engagement SystemCWE-891 gün önce
  7. 6,5Orta CVE-2026-113813Yama var PayPlug for WooCommerce eklentisinde yetkisiz sipariş silme, değiştirme ve okuma açığı PayPlug for WooCommerce (Official)CWE-8621 gün önce
  8. 6,8Orta CVE-2026-113488Yama var GeoDirectory WordPress eklentisinde gd_post_badge 'cta' özniteliğinden kaynaklanan kalıcı XSS GeoDirectoryCWE-791 gün önce
  9. 6,8Orta CVE-2026-113487Yama var GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute GeoDirectoryCWE-791 gün önce
  10. 6,5Orta CVE-2026-113486Yama var Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF Media Library AssistantCWE-3521 gün önce
  11. 6,5Orta CVE-2026-113485Yama var Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF Media Library AssistantCWE-3521 gün önce
  12. 6,8Orta CVE-2026-111967Yama var MP3 Audio Player (Sonaar) eklentisinde kısa kod özniteliği üzerinden depolanmış XSS MP3 Audio PlayerCWE-791 gün önce
  13. 4,3Orta CVE-2026-111960Yama var Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability Royal MCPCWE-8631 gün önce
  14. 4,7Orta CVE-2026-111031Yama var Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter Welcart e-CommerceCWE-6011 gün önce
  15. 6,8Orta CVE-2026-111027Yama var Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter Welcart e-CommerceCWE-891 gün önce
  16. 6,5Orta CVE-2026-110691Yama var WPOrLogin WordPress eklentisinde yetkisiz gizli giriş adresi değiştirme açığı WPOrLoginCWE-8621 gün önce
  17. 6,8Orta CVE-2026-110524Yama var Copy Anything to Clipboard for WordPress eklentisi: shortcode özniteliğinde depolanan XSS Copy Anything to Clipboard for WordPressCWE-791 gün önce
  18. 5,3Orta CVE-2026-110509Yama var Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler Essential Addons for ElementorCWE-2001 gün önce
  19. 6,8Orta CVE-2026-110506Yama var Page Builder by SiteOrigin eklentisinde Contributor+ yetkisiyle depolanmış XSS açığı Page Builder by SiteOriginCWE-791 gün önce
  20. 6,5Orta CVE-2026-110292Yama var PayPlug for WooCommerce eklentisinde yetkisiz sipariş anahtarı ifşası ve sipariş iptali PayPlug for WooCommerce (Official)CWE-2001 gün önce
  21. 5,3Orta CVE-2026-107100Yama var Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content Royal Addons for ElementorCWE-2001 gün önce
  22. 6,8Orta CVE-2026-107098Yama var Royal Addons for Elementor: Google Haritalar widget yüksekliğinde kalıcı XSS Royal Addons for ElementorCWE-791 gün önce
  23. 5,3Orta CVE-2026-107097Yama var Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe Royal Addons for ElementorCWE-8621 gün önce
  24. 5,3Orta CVE-2026-106003Yama var Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion Court ReservationCWE-2841 gün önce
  25. 5,3Orta CVE-2026-106002Yama var Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion Court ReservationCWE-8621 gün önce