Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 34.234 CVE, 0 KEV kaydı · son NVD senkronu 09.11.2026 17:26. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-66685 | Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. | 5.3 | 06.08.2026 |
| CVE-2026-66686 | Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions. | 6.5 | 06.08.2026 |
| CVE-2026-66440 | Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. | 7.1 | 06.08.2026 |
| CVE-2026-66447 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. | 9.3 | 06.08.2026 |
| CVE-2026-66451 | Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions. | 6.5 | 06.08.2026 |
| CVE-2026-66452 | Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions. | 6.5 | 06.08.2026 |
| CVE-2026-66457 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2. | 7.1 | 06.08.2026 |
| CVE-2026-66470 | Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions. | 7.1 | 06.08.2026 |
| CVE-2026-66662 | Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions. | 9.8 | 06.08.2026 |
| CVE-2026-66663 | Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. | 7.1 | 06.08.2026 |
| CVE-2026-65575 | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65576 | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65577 | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65578 | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65579 | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65581 | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. | 9.8 | 06.08.2026 |
| CVE-2026-66425 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. | 6.5 | 06.08.2026 |
| CVE-2026-66439 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. | 7.1 | 06.08.2026 |
| CVE-2026-65560 | Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. | 7.1 | 06.08.2026 |
| CVE-2026-65565 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. | 7.1 | 06.08.2026 |
| CVE-2026-65569 | Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. | 8.5 | 06.08.2026 |
| CVE-2026-65570 | Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. | 8.1 | 06.08.2026 |
| CVE-2026-65571 | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65572 | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. | 9.8 | 06.08.2026 |
| CVE-2026-65573 | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | 9.8 | 06.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.