CVE-2026-19632Otomatik saldırıya uygun · CISA
TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
CVSS Skor
9.8
EPSS İhtimal
%9.0
Risk Skoru
0.9
Yayın
1 ay önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, are listed below - CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in
İlgili Benzer Açıklar
9.8
CVE-2026-15826User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
ÜreticicozmoslabsÜrünUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
C
Yama durumu bilinmiyor Public Exploits:2EPSS %4
6.1
CVE-2026-17505TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting
Yama durumu bilinmiyor Public Exploits:1EPSS %1
9.8
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-19632"