Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.242 CVE, 0 KEV kaydı · son NVD senkronu 14.11.2026 11:30. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-59560 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. | 6.5 | 27.07.2026 |
| CVE-2026-59550 | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | 9.3 | 27.07.2026 |
| CVE-2026-59551 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | 8.5 | 27.07.2026 |
| CVE-2026-59552 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. | 7.2 | 27.07.2026 |
| CVE-2026-59553 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. | 7.1 | 27.07.2026 |
| CVE-2026-59556 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions. | 7.1 | 27.07.2026 |
| CVE-2026-59557 | Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions. | 6.5 | 27.07.2026 |
| CVE-2026-59558 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. | 7.1 | 27.07.2026 |
| CVE-2026-59535 | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. | 7.3 | 27.07.2026 |
| CVE-2026-59536 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59537 | Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. | 7.6 | 27.07.2026 |
| CVE-2026-59538 | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. | 9.3 | 27.07.2026 |
| CVE-2026-59539 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59546 | Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. | 7.4 | 27.07.2026 |
| CVE-2026-59548 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59549 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | 9.3 | 27.07.2026 |
| CVE-2026-59527 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | 9.3 | 27.07.2026 |
| CVE-2026-59528 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59529 | Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59530 | Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59531 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59532 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. | 7.5 | 27.07.2026 |
| CVE-2026-59533 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. | 9.3 | 27.07.2026 |
| CVE-2026-59534 | Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. | 7.5 | 27.07.2026 |
| CVE-2026-65879 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms. | 9.8 | 27.07.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.