- Katılım
- 12 Şub 2024
- Mesajlar
- 37
Genel Bilgi
Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir.
Etki
Mevcut zafiyetler nedeniyle hedef sistemlerin siber saldırganlar tarafından saldırıya uğraması ihtimal dahilindedir. CVE kodları şöyledir:
CVE-2026-12982, CVE-2026-14603, CVE-2026-12981, CVE-2026-12877, CVE-2026-12690, CVE-2026-12689, CVE-2026-12688, CVE-2026-12497, CVE-2026-15346, CVE-2026-15739, CVE-2026-15821, CVE-2026-8789, CVE-2026-10033, CVE-2026-15663, CVE-2026-15401, CVE-2026-14955, CVE-2026-15962, CVE-2026-9830, CVE-2026-14827, CVE-2026-14820, CVE-2026-14568, CVE-2026-14289, CVE-2026-14236, CVE-2026-14235, CVE-2026-14203, CVE-2026-14190, CVE-2026-14189, CVE-2026-13726, CVE-2026-13714, CVE-2026-13597, CVE-2026-13400, CVE-2026-13390, CVE-2026-13332, CVE-2026-13152, CVE-2026-12493, CVE-2026-12394, CVE-2026-12255, CVE-2026-10082 ve CVE-2025-15662
Çözüm
Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.
Kaynaklar
https://plugins.trac.wordpress.org/....14.9/includes/AJAX/REST/BatchProcess.php#L41
https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.14.9/includes/Abstracts/Model.php#L714
https://plugins.trac.wordpress.org/...4.9/includes/Admin/Menus/ImportExport.php#L63
https://plugins.trac.wordpress.org/.../includes/Admin/Processes/ImportForm.php#L357
https://plugins.trac.wordpress.org/...d=3614986@ninja-forms&new=3614986@ninja-forms
https://www.wordfence.com/threat-in...da47d8-8e8c-4103-aabb-c70935e13450?source=cve
https://plugins.trac.wordpress.org/.../admin/views/editorder/tmpl/default.php#L1405
https://plugins.trac.wordpress.org/.../admin/views/editorder/tmpl/default.php#L1420
https://plugins.trac.wordpress.org/browser/vikbooking/tags/1.8.12/site/controller.php#L1083
https://plugins.trac.wordpress.org/browser/vikbooking/tags/1.8.12/site/controller.php#L304
