Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.312 CVE, 0 KEV kaydı · son NVD senkronu 15.11.2026 17:31. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-57630 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. | 5.3 | 26.06.2026 |
| CVE-2026-57631 | Administrator SQL Injection in Popup box <= 6.0.1 versions. | 7.6 | 26.06.2026 |
| CVE-2026-57632 | Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions. | 5.4 | 26.06.2026 |
| CVE-2026-57633 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. | 5.3 | 26.06.2026 |
| CVE-2026-57634 | Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. | 4.3 | 26.06.2026 |
| CVE-2026-57324 | Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57325 | Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. | 7.1 | 26.06.2026 |
| CVE-2026-57430 | Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions. | 4.3 | 26.06.2026 |
| CVE-2026-57431 | Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57527 | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax. | 8.7 | 26.06.2026 |
| CVE-2026-57617 | Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57618 | Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57622 | Subscriber Broken Access Control in WPCafe <= 3.0.14 versions. | 4.3 | 26.06.2026 |
| CVE-2026-57315 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. | 8.5 | 26.06.2026 |
| CVE-2026-57316 | Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57317 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. | 7.1 | 26.06.2026 |
| CVE-2026-57318 | Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. | 6.5 | 26.06.2026 |
| CVE-2026-57319 | Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. | 7.1 | 26.06.2026 |
| CVE-2026-57321 | Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions. | 7.1 | 26.06.2026 |
| CVE-2026-57322 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows Reflected XSS.This issue affects weMail: from n/a through 2.1.2. | 7.1 | 26.06.2026 |
| CVE-2026-57323 | Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. | 5.8 | 26.06.2026 |
| CVE-2026-56072 | Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. | 7.1 | 26.06.2026 |
| CVE-2026-56773 | Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints l | 8.7 | 26.06.2026 |
| CVE-2026-57312 | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. | 7.1 | 26.06.2026 |
| CVE-2026-56067 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | 9.3 | 26.06.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.