Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

WordPress eklenti ve temaları

WordPress eklenti ve temalarında çıkan açıklar. Kayıtların çoğu Wordfence, WPScan ve Patchstack'ten geliyor.

Toplam açık
392
Son 30 gün
392
Kritik
35
Aktif istismar
0
Önem dağılımı
  • Kritik 35
  • Yüksek 116
  • Orta 222
  • Düşük 19

Bu kategorideki yazılımlar

Bütün yazılımlar

Son açıklar

392 açık

  1. 7,2Yüksek CVE-2026-116390 WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability stepasyuk Filter Everything&nbsp;— WordPress &amp; WooCommerce FiltersCWE-50215 dk önce
  2. 9,8Kritik CVE-2026-115968Yama var WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability Ultimate MemberCWE-50215 dk önce
  3. 8,5Yüksek CVE-2026-115603Yama var WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability Advanced Ads GmbH Advanced Ads – TrackingCWE-8915 dk önce
  4. 8,8Yüksek CVE-2026-116389 WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability crossi72 Phoenix Media RenameCWE-50215 dk önce
  5. 7,2Yüksek CVE-2026-115590Yama var WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability weDevs DokanCWE-50215 dk önce
  6. 7,5Yüksek CVE-2026-116393 WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability iHomefinder, Inc. Optima ExpressCWE-8621 sa önce
  7. 7,2Yüksek CVE-2026-116392 WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability PickPlugins AccordionCWE-5021 sa önce
  8. 8,8Yüksek CVE-2026-116391Yama var WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability GS Plugins GS Logo SliderCWE-5021 sa önce
  9. 6,5Orta CVE-2026-116404 WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability David Anderson Redux FrameworkCWE-8621 sa önce
  10. 8,5Yüksek CVE-2026-111850Yama var WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability BuddyPressCWE-891 sa önce
  11. 7,1Yüksek CVE-2026-115612Yama var WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability iova.mihai SliceWPCWE-791 sa önce
  12. 7,1Yüksek CVE-2026-115596Yama var WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability impleCode eCommerce Product CatalogCWE-791 sa önce
  13. 7,1Yüksek CVE-2026-115593Yama var WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability Unlimited Elements For Elementor (Free Widgets, Addons, Templates)CWE-791 sa önce
  14. 7,5Yüksek CVE-2026-115591Yama var WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability Contact Form by SupsysticCWE-2011 sa önce
  15. 9,3Kritik CVE-2026-111411Yama var WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability Aman FunnelKit AutomationsCWE-891 sa önce
  16. 6,5Orta CVE-2026-115957Yama var WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability WP Discussion BoardCWE-791 sa önce
  17. 9,3Kritik CVE-2026-115607Yama var WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability Crowd Favorite DXP ToolKitCWE-891 sa önce
  18. 7,1Yüksek CVE-2026-115609Yama var WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability Stiofan GetPaidCWE-791 sa önce
  19. 7,1Yüksek CVE-2026-115606Yama var WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability Crowd Favorite DXP ToolKitCWE-791 sa önce
  20. 5,4Orta CVE-2026-116855Yama var WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability wphocus My auctions allegroCWE-8623 sa önce
  21. 4,9Orta CVE-2026-115223Yama var Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block Smart Popup by SupsysticCWE-13363 sa önce
  22. 5,3Orta CVE-2026-110508Yama var Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification Essential Addons for ElementorCWE-8623 sa önce
  23. 5,3Orta CVE-2026-106648Yama var Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes Royal Elementor AddonsCWE-743 sa önce
  24. 5,3Orta CVE-2026-103330 Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass Sadad QA PaymentCWE-3453 sa önce
  25. 5,3Orta CVE-2026-103313 BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler BitPay Gateway for WooCommerceCWE-3453 sa önce