averta kayıtları
averta üreticisine ait 46 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %23,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')31
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-502 Deserialization of Untrusted Data4
- CWE-862 Missing Authorization4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
46 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-37888İstismar yok | WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerabilityaverta · shortcodes and extra features for phlox theme · CWE-22 | Kritik9,8 | — | %0,7 | 17 May 2024 |
39İzleyin | CVE-2024-50500İstismar yok | WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerabilityaverta · shortcodes and extra features for phlox theme · CWE-862 | Kritik9,8 | — | %0,4 | 3 Şub 2025 |
39İzleyin | CVE-2023-47507İstismar yok | WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injectionaverta · master slider pro · CWE-502 | Kritik9,8 | — | %0,4 | 20 Ara 2023 |
38İzleyin | CVE-2024-32600İstismar yok | WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerabilityaverta · master slider · CWE-502 | Kritik9,6 | — | %0,5 | 18 Nis 2024 |
35İzleyin | CVE-2024-4389İstismar yok | Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticaaverta · depicter — popup & slider builder · CWE-434 | Yüksek8,8 | — | %1,0 | 14 Ağu 2024 |
35İzleyin | CVE-2022-3359İstismar yok | Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injectionaverta · shortcodes and extra features for phlox theme · CWE-502 | Yüksek8,8 | — | %0,8 | 12 Ara 2022 |
35İzleyin | CVE-2024-31099İstismar yok | WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerabilityaverta · shortcodes and extra features for phlox theme · CWE-862 | Yüksek8,8 | — | %0,4 | 1 Nis 2024 |
34İzleyin | CVE-2023-39163İstismar yok | WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerabilityaverta · phlox shop · CWE-22 | Yüksek8,6 | — | %0,6 | 17 May 2024 |
30İzleyin | CVE-2023-7064İstismar yok | Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importeraverta · shortcodes and extra features for phlox theme · CWE-502 | Yüksek7,5 | — | %0,9 | 2 May 2024 |
26İzleyin | CVE-2025-63045İstismar yok | WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityaverta · master slider pro · CWE-79 | Orta6,5 | — | %0,3 | 9 Ara 2025 |
26İzleyin | CVE-2024-6490İstismar yok | Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletionaverta · master slider · CWE-352 | Orta6,5 | — | %0,2 | 26 Tem 2024 |
24İzleyin | CVE-2022-1910Kavram kanıtı | Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scriptingaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta6,1 | — | %1,4 | 11 Tem 2022 |
24İzleyin | CVE-2023-47508İstismar yok | WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)averta · master slider · CWE-79 | Orta6,1 | — | %0,4 | 16 Kas 2023 |
24İzleyin | CVE-2024-6339İstismar yok | Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parametersaverta · phlox · CWE-79 | Orta6,1 | — | %0,4 | 21 Ağu 2024 |
24İzleyin | CVE-2024-37222İstismar yok | WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerabilityaverta · master slider · CWE-79 | Orta6,1 | — | %0,3 | 20 Haz 2024 |
21İzleyin | CVE-2018-20368İstismar yok | The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings valuaverta · master slider · CWE-79 | Orta5,4 | — | %0,7 | 22 Ara 2018 |
21İzleyin | CVE-2024-3341İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcodeaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,5 | 2 May 2024 |
21İzleyin | CVE-2024-3517İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widgetaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,5 | 2 May 2024 |
21İzleyin | CVE-2024-1449İstismar yok | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · master slider · CWE-79 | Orta5,4 | — | %0,4 | 2 Mar 2024 |
21İzleyin | CVE-2024-1396İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'averta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 2 May 2024 |
21İzleyin | CVE-2024-1533İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 2 May 2024 |
21İzleyin | CVE-2024-1357İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcodeaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 16 Nis 2024 |
21İzleyin | CVE-2024-1348İstismar yok | Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 2 May 2024 |
21İzleyin | CVE-2024-8486İstismar yok | Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgetsaverta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 5 Eki 2024 |
21İzleyin | CVE-2023-50368İstismar yok | WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)averta · shortcodes and extra features for phlox theme · CWE-79 | Orta5,4 | — | %0,4 | 14 Ara 2023 |
- CVE-2023-3788839İzleyin
WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability
KritikCVSS 9,8İstismar yokEPSS %1averta · shortcodes and extra features for phlox theme17 May 2024
- CVE-2024-5050039İzleyin
WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme3 Şub 2025
- CVE-2023-4750739İzleyin
WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %0averta · master slider pro20 Ara 2023
- CVE-2024-3260038İzleyin
WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability
KritikCVSS 9,6İstismar yokEPSS %0averta · master slider18 Nis 2024
- CVE-2024-438935İzleyin
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authentica
YüksekCVSS 8,8İstismar yokEPSS %1averta · depicter — popup & slider builder14 Ağu 2024
- CVE-2022-335935İzleyin
Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
YüksekCVSS 8,8İstismar yokEPSS %1averta · shortcodes and extra features for phlox theme12 Ara 2022
- CVE-2024-3109935İzleyin
WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme1 Nis 2024
- CVE-2023-3916334İzleyin
WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1averta · phlox shop17 May 2024
- CVE-2023-706430İzleyin
Shortcodes and extra features for Phlox theme <= 2.17.5 - Authenticated (Subscriber+) PHP Object Injection via auxin_template_control_importer
YüksekCVSS 7,5İstismar yokEPSS %1averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2025-6304526İzleyin
WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0averta · master slider pro9 Ara 2025
- CVE-2024-649026İzleyin
Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion
OrtaCVSS 6,5İstismar yokEPSS %0averta · master slider26 Tem 2024
- CVE-2022-191024İzleyin
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1averta · shortcodes and extra features for phlox theme11 Tem 2022
- CVE-2023-4750824İzleyin
WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0averta · master slider16 Kas 2023
- CVE-2024-633924İzleyin
Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters
OrtaCVSS 6,1İstismar yokEPSS %0averta · phlox21 Ağu 2024
- CVE-2024-3722224İzleyin
WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0averta · master slider20 Haz 2024
- CVE-2018-2036821İzleyin
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings valu
OrtaCVSS 5,4İstismar yokEPSS %1averta · master slider22 Ara 2018
- CVE-2024-334121İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2024-351721İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
OrtaCVSS 5,4İstismar yokEPSS %1averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2024-144921İzleyin
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0averta · master slider2 Mar 2024
- CVE-2024-139621İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2024-153321İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2024-135721İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme16 Nis 2024
- CVE-2024-134821İzleyin
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme2 May 2024
- CVE-2024-848621İzleyin
Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme5 Eki 2024
- CVE-2023-5036821İzleyin
WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0averta · shortcodes and extra features for phlox theme14 Ara 2023