Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

WordPress eklenti ve temaları

WordPress eklenti ve temalarında çıkan açıklar. Kayıtların çoğu Wordfence, WPScan ve Patchstack'ten geliyor.

Toplam açık
387
Son 30 gün
387
Kritik
34
Aktif istismar
0
Önem dağılımı
  • Kritik 34
  • Yüksek 112
  • Orta 222
  • Düşük 19

Bu kategorideki yazılımlar

Bütün yazılımlar

Son açıklar

387 açık

  1. 7,5Yüksek CVE-2026-116393 WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability iHomefinder, Inc. Optima ExpressCWE-86245 dk önce
  2. 7,2Yüksek CVE-2026-116392 WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability PickPlugins AccordionCWE-50245 dk önce
  3. 8,8Yüksek CVE-2026-116391Yama var WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability GS Plugins GS Logo SliderCWE-50245 dk önce
  4. 6,5Orta CVE-2026-116404 WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability David Anderson Redux FrameworkCWE-86245 dk önce
  5. 8,5Yüksek CVE-2026-111850Yama var WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability BuddyPressCWE-8945 dk önce
  6. 7,1Yüksek CVE-2026-115612Yama var WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability iova.mihai SliceWPCWE-7946 dk önce
  7. 7,1Yüksek CVE-2026-115596Yama var WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability impleCode eCommerce Product CatalogCWE-7946 dk önce
  8. 7,1Yüksek CVE-2026-115593Yama var WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability Unlimited Elements For Elementor (Free Widgets, Addons, Templates)CWE-7946 dk önce
  9. 7,5Yüksek CVE-2026-115591Yama var WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability Contact Form by SupsysticCWE-20146 dk önce
  10. 9,3Kritik CVE-2026-111411Yama var WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability Aman FunnelKit AutomationsCWE-8946 dk önce
  11. 6,5Orta CVE-2026-115957Yama var WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability WP Discussion BoardCWE-7946 dk önce
  12. 9,3Kritik CVE-2026-115607Yama var WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability Crowd Favorite DXP ToolKitCWE-8946 dk önce
  13. 7,1Yüksek CVE-2026-115609Yama var WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability Stiofan GetPaidCWE-7946 dk önce
  14. 7,1Yüksek CVE-2026-115606Yama var WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability Crowd Favorite DXP ToolKitCWE-7946 dk önce
  15. 5,4Orta CVE-2026-116855Yama var WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability wphocus My auctions allegroCWE-8622 sa önce
  16. 4,9Orta CVE-2026-115223Yama var Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block Smart Popup by SupsysticCWE-13363 sa önce
  17. 5,3Orta CVE-2026-110508Yama var Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification Essential Addons for ElementorCWE-8623 sa önce
  18. 5,3Orta CVE-2026-106648Yama var Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes Royal Elementor AddonsCWE-743 sa önce
  19. 5,3Orta CVE-2026-103330 Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass Sadad QA PaymentCWE-3453 sa önce
  20. 5,3Orta CVE-2026-103313 BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler BitPay Gateway for WooCommerceCWE-3453 sa önce
  21. 4,3Orta CVE-2026-85655 Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow shortpixel Enable Media ReplaceCWE-8625 sa önce
  22. 6,1Orta CVE-2026-101935 Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter echoplugins Echo Knowledge Base – Documentation, FAQs, Chat & Smart SearchCWE-795 sa önce
  23. 8,8Yüksek CVE-2026-92797 Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter MemberpressCWE-3525 sa önce
  24. 6,4Orta CVE-2026-109975 Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & InboxCWE-797 sa önce
  25. 6,5Orta CVE-2026-76005 WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute chuck1982 WP Inventory ManagerCWE-897 sa önce