- Katılım
- 12 Şub 2024
- Mesajlar
- 271
Genel Bilgi
Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir.
Etki
Mevcut zafiyetler nedeniyle hedef sistemlerin siber saldırganlar tarafından saldırıya uğraması ihtimal dahilindedir. CVE kodları şöyledir:
CVE-2026-19942, CVE-2026-19794, CVE-2026-12128, CVE-2026-15341, CVE-2026-15001, CVE-2026-15303, CVE-2026-8840, CVE-2026-15162, CVE-2026-15965, CVE-2026-15312, CVE-2026-14484, CVE-2026-16080, CVE-2026-14433, CVE-2026-16145, CVE-2026-13360, CVE-2026-16146, CVE-2026-15948, CVE-2026-15453, CVE-2026-16094, CVE-2026-16586, CVE-2026-15993, CVE-2026-17090, CVE-2026-18387, CVE-2026-14279, CVE-2026-15826, CVE-2026-16142, CVE-2026-15142, CVE-2026-18438, CVE-2026-12248, CVE-2026-19598, CVE-2026-18855, CVE-2026-2487, CVE-2026-16779, CVE-2026-15002, CVE-2026-15726, CVE-2026-15963, CVE-2025-10005, CVE-2026-15009, CVE-2026-15066, CVE-2026-17123, CVE-2026-13167, CVE-2026-15441, CVE-2026-11780, CVE-2026-13358, CVE-2026-14524, CVE-2026-16079, CVE-2026-12477, CVE-2026-16098, CVE-2026-16099, CVE-2026-18385, CVE-2026-14498, CVE-2026-15602, CVE-2026-12905, CVE-2026-18432, CVE-2026-15351, CVE-2026-17581, CVE-2026-9767, CVE-2026-15345, CVE-2026-17582, CVE-2026-16775, CVE-2026-15056, CVE-2026-10035, CVE-2026-16758, CVE-2026-18316, CVE-2026-2283, CVE-2026-18402, CVE-2026-15790, CVE-2026-15604, CVE-2026-18347, CVE-2026-17604, CVE-2026-13424, CVE-2026-17087, CVE-2026-2497, CVE-2026-17608, CVE-2026-2357, CVE-2026-12998, CVE-2026-10734, CVE-2024-13784, CVE-2026-11801, CVE-2026-75091, CVE-2026-15748 ve CVE-2025-11729
Çözüm
Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.
Kaynaklar
https://plugins.trac.wordpress.org/.../class-wholesale-user-register-addon.php#L141
https://plugins.trac.wordpress.org/.../class-wholesale-user-register-addon.php#L153
https://plugins.trac.wordpress.org/.../class-wholesale-user-register-addon.php#L276
https://plugins.trac.wordpress.org/...e/class-wholesale-user-register-addon.php#L30
https://www.wordfence.com/threat-in...d59d7a-e7f6-440d-9c2a-00266c0dcbff?source=cve
https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.16.4/features/functions.php#L1481
https://plugins.trac.wordpress.org/...s/3.16.4/front-end/class-formbuilder.php#L262
https://plugins.trac.wordpress.org/...s/3.16.4/front-end/class-formbuilder.php#L364
https://plugins.trac.wordpress.org/...s/3.16.4/front-end/class-formbuilder.php#L742
https://plugins.trac.wordpress.org/...s/3.16.4/front-end/class-formbuilder.php#L945
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/
