Siber Güvenlik Başkanlığı, bazı WordPress eklentilerinde tespit edilen 157 güvenlik zafiyeti için TR-26-1290 kodlu bildirim yayımladı. Başkanlık, Wordfence, Patchstack ve WPScan kaynaklarına işaret ederek yöneticilerin yayımlanan dokümanları inceleyip gerekli önlemleri almasını istiyor.
SGB tarafından 12 Ekim 2026'da yapılan duyuruda, söz konusu zafiyetler nedeniyle hedef sistemlerin siber saldırganlar tarafından saldırıya uğramasının ihtimal dahilinde olduğu belirtildi. Bildirimde yöneticilerin yayımlanan güvenlik dokümanlarını incelemeleri ve gerekli güncellemeleri ivedilikle yapmaları tavsiye edildi.
Bildirim kapsamındaki zafiyet kodları
TR-26-1290 kodlu bildirimde yer alan 157 CVE kaydı şu şekilde sıralandı: CVE-2026-108981, CVE-2026-81929, CVE-2026-104022, CVE-2026-93883, CVE-2026-104915, CVE-2026-94589, CVE-2026-103365, CVE-2026-104732, CVE-2026-107645, CVE-2026-104797, CVE-2026-96743, CVE-2026-104898, CVE-2026-89301, CVE-2026-97670, CVE-2026-104021, CVE-2026-9696, CVE-2026-104724, CVE-2026-103998, CVE-2026-103424, CVE-2026-6723, CVE-2026-104735, CVE-2026-103964, CVE-2026-87869, CVE-2026-97630, CVE-2026-5727, CVE-2026-102401, CVE-2026-101324, CVE-2026-103889, CVE-2026-104993, CVE-2026-96648, CVE-2026-12054, CVE-2026-14335, CVE-2026-17025, CVE-2026-14882, CVE-2026-103912, CVE-2026-103482, CVE-2026-14877, CVE-2026-93775, CVE-2026-97643, CVE-2026-104723, CVE-2026-104762, CVE-2026-96682, CVE-2026-92975, CVE-2026-104899, CVE-2026-18558, CVE-2026-77183, CVE-2026-91862, CVE-2026-94421, CVE-2026-96667, CVE-2026-94375, CVE-2026-103520, CVE-2026-104763, CVE-2026-104725, CVE-2026-14379, CVE-2026-16776, CVE-2026-83526, CVE-2026-104742, CVE-2026-104766, CVE-2026-104741, CVE-2026-78068, CVE-2026-104023, CVE-2026-18496, CVE-2026-91050, CVE-2026-103427, CVE-2026-96572, CVE-2026-104006, CVE-2026-3717, CVE-2026-107742, CVE-2026-100196, CVE-2026-102402, CVE-2026-6243, CVE-2026-5725, CVE-2026-107712, CVE-2024-50425, CVE-2026-100161, CVE-2026-94538, CVE-2026-104801, CVE-2026-103897, CVE-2026-89100, CVE-2026-12626, CVE-2026-97348, CVE-2026-95684, CVE-2026-96840, CVE-2026-96574, CVE-2026-15178, CVE-2026-96558, CVE-2026-107657, CVE-2026-4791, CVE-2026-104722, CVE-2026-91136, CVE-2026-105892, CVE-2026-81797, CVE-2026-62035, CVE-2026-108695, CVE-2026-97183, CVE-2026-96227, CVE-2026-93550, CVE-2026-91829, CVE-2026-89305, CVE-2026-89304, CVE-2026-89302, CVE-2026-89299, CVE-2026-89297, CVE-2026-89287, CVE-2026-89285, CVE-2026-89283, CVE-2026-89234, CVE-2026-89232, CVE-2026-89214, CVE-2026-89213, CVE-2026-89195, CVE-2026-88930, CVE-2026-88905, CVE-2026-88903, CVE-2026-88827, CVE-2026-88826, CVE-2026-88785, CVE-2026-87764, CVE-2026-87762, CVE-2026-87761, CVE-2026-87760, CVE-2026-86798, CVE-2026-86717, CVE-2026-86706, CVE-2026-85126, CVE-2026-85121, CVE-2026-85118, CVE-2026-84737, CVE-2026-84734, CVE-2026-84261, CVE-2026-84260, CVE-2026-84259, CVE-2026-84258, CVE-2026-84254, CVE-2026-84253, CVE-2026-84252, CVE-2026-84251, CVE-2026-81649, CVE-2026-81420, CVE-2026-81156, CVE-2026-81155, CVE-2026-81154, CVE-2026-81153, CVE-2026-14854, CVE-2026-107694, CVE-2026-107507, CVE-2026-106029, CVE-2026-104684, CVE-2026-104682, CVE-2026-104681, CVE-2026-104680, CVE-2026-104028, CVE-2026-103695, CVE-2026-103694, CVE-2026-103305, CVE-2026-94235 ve CVE-2026-12980.
Başkanlık daha önce 8 Ekim 2026'da TR-26-1269 kodlu bildirimle 7 eklentideki 8 zafiyeti duyurmuştu.
Kaynaklar
- T.C. Siber Güvenlik Başkanlığı Güvenlik Bildirimi (TR-26-1290)
- Wordfence Threat Intelligence
- Patchstack Vulnerability Database
- WPScan Plugin Vulnerabilities
Kapak görseli: WordPress Foundation / Wikimedia Commons, GPL (1200×675 uyarlandı).
