Sh

11 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
19İzleyin	CVE-2024-0653İstismar yok	Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritpingwpgogo · custom field template · CWE-79 XSS	Orta4,8	—	%0,2	10 Haz 2024
19İzleyin	CVE-2024-1571İstismar yok	WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embedbootstrapped · wp recipe maker · CWE-79 XSS	Orta4,8	—	%0,4	9 Nis 2024
19İzleyin	CVE-2024-0662İstismar yok	The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 dcolorlib · fancybox · CWE-79 XSS	Orta4,8	—	%0,5	9 Nis 2024
21İzleyin	CVE-2024-1987İstismar yok	WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodebutlerblog · wp-members · CWE-79 XSS	Orta5,4	—	%0,4	8 Mar 2024
19İzleyin	CVE-2024-0689İstismar yok	Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scriptingcustom field suite project · custom field suite · CWE-79 XSS	Orta4,8	—	%0,3	28 Şub 2024
21İzleyin	CVE-2024-1586İstismar yok	Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scriptingmagazine3 · schema \& structured data for wp \& amp · CWE-79 XSS	Orta5,4	—	%0,4	28 Şub 2024
21İzleyin	CVE-2023-6806İstismar yok	Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settingssquirrly · starbox · CWE-79 XSS	Orta5,4	—	%0,4	28 Şub 2024
19İzleyin	CVE-2024-0657İstismar yok	Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scriptinginternallinkjuicer · internal link juicer · CWE-79 XSS	Orta4,8	—	%0,3	9 Şub 2024
17İzleyin	CVE-2024-0366İstismar yok	Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Referencesquirrly · starbox · CWE-284 Erişim denetimi (IDOR)	Orta4,3	—	%0,6	5 Şub 2024
19İzleyin	CVE-2024-0625İstismar yok	WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]wpfront · wpfront notification bar · CWE-79 XSS	Orta4,8	—	%0,4	24 Oca 2024
19İzleyin	CVE-2024-0688İstismar yok	WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scriptingpubsubhubbub · websub · CWE-79 XSS	Orta4,8	—	%0,3	24 Oca 2024

CVE-2024-0653
19İzleyin
Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wpgogo · custom field template10 Haz 2024
CVE-2024-1571
19İzleyin
WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
bootstrapped · wp recipe maker9 Nis 2024
CVE-2024-0662
19İzleyin
The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 d
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
colorlib · fancybox9 Nis 2024
CVE-2024-1987
21İzleyin
WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
butlerblog · wp-members8 Mar 2024
CVE-2024-0689
19İzleyin
Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
custom field suite project · custom field suite28 Şub 2024
CVE-2024-1586
21İzleyin
Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
magazine3 · schema \& structured data for wp \& amp28 Şub 2024
CVE-2023-6806
21İzleyin
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
squirrly · starbox28 Şub 2024
CVE-2024-0657
19İzleyin
Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
internallinkjuicer · internal link juicer9 Şub 2024
CVE-2024-0366
17İzleyin
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
OrtaCVSS 4,3İstismar yokEPSS %1
- Erişim denetimi (IDOR)
squirrly · starbox5 Şub 2024
CVE-2024-0625
19İzleyin
WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wpfront · wpfront notification bar24 Oca 2024
CVE-2024-0688
19İzleyin
WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pubsubhubbub · websub24 Oca 2024