Vlad Vector (Patchstack)
20 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
19İzleyin | CVE-2022-45082İstismar yok | WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesoxilab · accordions · CWE-79 | Orta4,8 | — | %0,4 | 18 Kas 2022 |
35İzleyin | CVE-2022-44740İstismar yok | WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesconstantcontact · creative mail · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2022 |
28İzleyin | CVE-2022-42459İstismar yok | WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerabilityoxilab · image hover effects ultimate · CWE-264 | Yüksek7,2 | — | %0,9 | 18 Kas 2022 |
35İzleyin | CVE-2022-40695İstismar yok | WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilitiesclogica · seo redirection · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2022 |
21İzleyin | CVE-2021-36905İstismar yok | WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesexpresstech · quiz and survey master · CWE-79 | Orta5,4 | — | %0,5 | 17 Kas 2022 |
35İzleyin | CVE-2021-36906İstismar yok | WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilitiesexpresstech · quiz and survey master · CWE-639 | Yüksek8,8 | — | %0,6 | 3 Kas 2022 |
28İzleyin | CVE-2021-36898İstismar yok | WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityexpresstech · quiz and survey master · CWE-89 | Yüksek7,2 | — | %0,9 | 28 Eki 2022 |
19İzleyin | CVE-2022-40311İstismar yok | WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityfatcatapps · analytics cat · CWE-79 | Orta4,8 | — | %0,5 | 21 Eki 2022 |
28İzleyin | CVE-2022-38104İstismar yok | WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerabilityoxilab · accordions · CWE-264 | Yüksek7,2 | — | %1,0 | 21 Eki 2022 |
21İzleyin | CVE-2022-40215İstismar yok | WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiestabs project · tabs · CWE-79 | Orta5,4 | — | %0,5 | 23 Eyl 2022 |
28İzleyin | CVE-2022-40217İstismar yok | WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerabilityxplodedthemes · wpide · CWE-434 | Yüksek7,2 | — | %1,0 | 21 Eyl 2022 |
21İzleyin | CVE-2022-38073İstismar yok | WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)getawesomesupport · awesome support · CWE-79 | Orta5,4 | — | %0,6 | 21 Eyl 2022 |
21İzleyin | CVE-2022-36390İstismar yok | WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilitytotal-soft · event calendar · CWE-79 | Orta5,4 | — | %0,5 | 21 Eyl 2022 |
21İzleyin | CVE-2022-36383İstismar yok | WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitieswebhelpagency · wha wordsearch · CWE-79 | Orta5,4 | — | %0,5 | 21 Eyl 2022 |
21İzleyin | CVE-2022-36365İstismar yok | WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitieswebhelpagency · wha crossword · CWE-79 | Orta5,4 | — | %0,7 | 21 Eyl 2022 |
35İzleyin | CVE-2022-36389İstismar yok | WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerabilitywordplus · better messages · CWE-352 | Yüksek8,8 | — | %0,4 | 23 Ağu 2022 |
35İzleyin | CVE-2022-36288İstismar yok | WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesw3eden · download manager · CWE-352 | Yüksek8,8 | — | %0,3 | 23 Ağu 2022 |
21İzleyin | CVE-2022-34658İstismar yok | WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesw3eden · download manager · CWE-79 | Orta5,4 | — | %0,6 | 23 Ağu 2022 |
24İzleyin | CVE-2022-34857İstismar yok | WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerabilitysmartypantsplugins · sp project \& document manager · CWE-79 | Orta6,1 | — | %0,6 | 22 Ağu 2022 |
26İzleyin | CVE-2022-36284İstismar yok | WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email changestoreapps · affiliate for woocommerce · CWE-639 | Orta6,5 | — | %0,6 | 5 Ağu 2022 |
- CVE-2022-4508219İzleyin
WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 4,8İstismar yokEPSS %0oxilab · accordions18 Kas 2022
- CVE-2022-4474035İzleyin
WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0constantcontact · creative mail18 Kas 2022
- CVE-2022-4245928İzleyin
WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1oxilab · image hover effects ultimate18 Kas 2022
- CVE-2022-4069535İzleyin
WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0clogica · seo redirection18 Kas 2022
- CVE-2021-3690521İzleyin
WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %0expresstech · quiz and survey master17 Kas 2022
- CVE-2021-3690635İzleyin
WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %1expresstech · quiz and survey master3 Kas 2022
- CVE-2021-3689828İzleyin
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1expresstech · quiz and survey master28 Eki 2022
- CVE-2022-4031119İzleyin
WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0fatcatapps · analytics cat21 Eki 2022
- CVE-2022-3810428İzleyin
WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1oxilab · accordions21 Eki 2022
- CVE-2022-4021521İzleyin
WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1tabs project · tabs23 Eyl 2022
- CVE-2022-4021728İzleyin
WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1xplodedthemes · wpide21 Eyl 2022
- CVE-2022-3807321İzleyin
WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)
OrtaCVSS 5,4İstismar yokEPSS %1getawesomesupport · awesome support21 Eyl 2022
- CVE-2022-3639021İzleyin
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1total-soft · event calendar21 Eyl 2022
- CVE-2022-3638321İzleyin
WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1webhelpagency · wha wordsearch21 Eyl 2022
- CVE-2022-3636521İzleyin
WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1webhelpagency · wha crossword21 Eyl 2022
- CVE-2022-3638935İzleyin
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wordplus · better messages23 Ağu 2022
- CVE-2022-3628835İzleyin
WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0w3eden · download manager23 Ağu 2022
- CVE-2022-3465821İzleyin
WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1w3eden · download manager23 Ağu 2022
- CVE-2022-3485724İzleyin
WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1smartypantsplugins · sp project \& document manager22 Ağu 2022
- CVE-2022-3628426İzleyin
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
OrtaCVSS 6,5İstismar yokEPSS %1storeapps · affiliate for woocommerce5 Ağu 2022