İçeriğe atla
Noroxi

advancedcustomfields kayıtları

advancedcustomfields üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%29,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2015-9479
    40Planlayın

    The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery

    KritikCVSS 9,8İstismar yokEPSS %3

    advancedcustomfields · acf fronted display10 Eki 2019

  • CVE-2023-30777
    36İzleyin

    WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %39

    advancedcustomfields · advanced custom fields10 May 2023

  • CVE-2022-2594
    35İzleyin

    Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload

    YüksekCVSS 8,8İstismar yokEPSS %2

    advancedcustomfields · advanced custom fields22 Ağu 2022

  • CVE-2023-1196
    35İzleyin

    Advanced Custom Fields - Contributor+ PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields2 May 2023

  • CVE-2024-34761
    34İzleyin

    Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wpengine inc · advanced custom fields pro10 Haz 2024

  • CVE-2021-20865
    31İzleyin

    Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab

    YüksekCVSS 7,5İstismar yokEPSS %2

    advancedcustomfields · advanced custom fields13 Ara 2021

  • CVE-2022-40696
    30İzleyin

    WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure

    YüksekCVSS 7,5İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields8 Oca 2024

  • CVE-2021-20866
    26İzleyin

    Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab

    OrtaCVSS 6,5İstismar yokEPSS %2

    advancedcustomfields · advanced custom fields13 Ara 2021

  • CVE-2022-23183
    26İzleyin

    Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12

    OrtaCVSS 6,5İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields31 Mar 2022

  • CVE-2021-20867
    26İzleyin

    Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab

    OrtaCVSS 6,5İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields13 Ara 2021

  • CVE-2024-9529
    26İzleyin

    Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution

    OrtaCVSS 6,6İstismar yokEPSS %0

    advancedcustomfields · advanced custom fields15 Kas 2024

  • CVE-2024-4565
    26İzleyin

    Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access

    OrtaCVSS 6,5İstismar yokEPSS %0

    advancedcustomfields · advanced custom fields20 Haz 2024

  • CVE-2021-24241
    24İzleyin

    Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields22 Nis 2021

  • CVE-2020-36172
    24İzleyin

    The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading t

    OrtaCVSS 6,1İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields6 Oca 2021

  • CVE-2023-40068
    22İzleyin

    Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7

    OrtaCVSS 5,4İstismar yokEPSS %2

    advancedcustomfields · advanced custom fields21 Ağu 2023

  • CVE-2018-20986
    21İzleyin

    The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.

    OrtaCVSS 5,4İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields22 Ağu 2019

  • CVE-2023-6701
    21İzleyin

    Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

    OrtaCVSS 5,4İstismar yokEPSS %1

    advancedcustomfields · advanced custom fields5 Şub 2024