İçeriğe geç
Filtreler
2.215 açık
-
6,4Orta
CVE-2026-103370
Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion
awesomesupport Awesome Support – WordPress HelpDesk & Support PluginCWE-791 gün önce
-
6,5Orta
CVE-2026-116609
WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute
osamaesh WP Visitor Statistics (Real Time Traffic)CWE-891 gün önce
-
6,8Orta
CVE-2026-115281Yama var
Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute
Recipe Card Blocks LiteCWE-891 gün önce
-
5,3Orta
CVE-2026-115255Yama var
WP Roster < 2.35 - Unauthenticated Roster Member Deletion
WP RosterCWE-2841 gün önce
-
5,8Orta
CVE-2026-115225Yama var
Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup
Customer Engagement SystemCWE-9181 gün önce
-
4,1Orta
CVE-2026-115224Yama var
Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding
Customer Engagement SystemCWE-891 gün önce
-
6,5Orta
CVE-2026-113813Yama var
PayPlug for WooCommerce eklentisinde yetkisiz sipariş silme, değiştirme ve okuma açığı
PayPlug for WooCommerce (Official)CWE-8621 gün önce
-
6,8Orta
CVE-2026-113488Yama var
GeoDirectory WordPress eklentisinde gd_post_badge 'cta' özniteliğinden kaynaklanan kalıcı XSS
GeoDirectoryCWE-791 gün önce
-
6,8Orta
CVE-2026-113487Yama var
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute
GeoDirectoryCWE-791 gün önce
-
6,5Orta
CVE-2026-113486Yama var
Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF
Media Library AssistantCWE-3521 gün önce
-
6,5Orta
CVE-2026-113485Yama var
Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF
Media Library AssistantCWE-3521 gün önce
-
6,8Orta
CVE-2026-111967Yama var
MP3 Audio Player (Sonaar) eklentisinde kısa kod özniteliği üzerinden depolanmış XSS
MP3 Audio PlayerCWE-791 gün önce
-
4,3Orta
CVE-2026-111960Yama var
Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability
Royal MCPCWE-8631 gün önce
-
4,7Orta
CVE-2026-111031Yama var
Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter
Welcart e-CommerceCWE-6011 gün önce
-
6,8Orta
CVE-2026-111027Yama var
Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter
Welcart e-CommerceCWE-891 gün önce
-
6,5Orta
CVE-2026-110691Yama var
WPOrLogin WordPress eklentisinde yetkisiz gizli giriş adresi değiştirme açığı
WPOrLoginCWE-8621 gün önce
-
6,8Orta
CVE-2026-110524Yama var
Copy Anything to Clipboard for WordPress eklentisi: shortcode özniteliğinde depolanan XSS
Copy Anything to Clipboard for WordPressCWE-791 gün önce
-
5,3Orta
CVE-2026-110509Yama var
Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler
Essential Addons for ElementorCWE-2001 gün önce
-
6,8Orta
CVE-2026-110506Yama var
Page Builder by SiteOrigin eklentisinde Contributor+ yetkisiyle depolanmış XSS açığı
Page Builder by SiteOriginCWE-791 gün önce
-
6,5Orta
CVE-2026-110292Yama var
PayPlug for WooCommerce eklentisinde yetkisiz sipariş anahtarı ifşası ve sipariş iptali
PayPlug for WooCommerce (Official)CWE-2001 gün önce
-
5,3Orta
CVE-2026-107100Yama var
Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content
Royal Addons for ElementorCWE-2001 gün önce
-
6,8Orta
CVE-2026-107098Yama var
Royal Addons for Elementor: Google Haritalar widget yüksekliğinde kalıcı XSS
Royal Addons for ElementorCWE-791 gün önce
-
5,3Orta
CVE-2026-107097Yama var
Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe
Royal Addons for ElementorCWE-8621 gün önce
-
5,3Orta
CVE-2026-106003Yama var
Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion
Court ReservationCWE-2841 gün önce
-
5,3Orta
CVE-2026-106002Yama var
Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
Court ReservationCWE-8621 gün önce