CartFlows kayıtları
cartflows üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-269 Improper Privilege Management1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-2024-2322İstismar yok | WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRFcartflows · woocommerce cart abandonment recovery · CWE-352 | Orta6,8 | — | %0,4 | 3 Nis 2024 |
25İzleyin | CVE-2024-4632İstismar yok | WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scrbrainstormforce · cartflows – funnel builder & checkout plugin for woocommerce · CWE-79 | Orta6,4 | — | %0,4 | 19 Haz 2024 |
24İzleyin | CVE-2023-36686İstismar yok | WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)cartflows · cartflows · CWE-79 | Orta6,1 | — | %0,4 | 5 Ağu 2023 |
19İzleyin | CVE-2021-24330İstismar yok | Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics IDcartflows · cartflows · CWE-79 | Orta4,8 | — | %0,7 | 1 Haz 2021 |
17İzleyin | CVE-2019-25151İstismar yok | Funnel Builder <= 1.3.0 - Arbitrary Plugin Activationcartflows · cartflows · CWE-269 | Orta4,3 | — | %0,7 | 6 Haz 2023 |
17İzleyin | CVE-2020-36736İstismar yok | WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypasscartflows · cartflows · CWE-352 | Orta4,3 | — | %0,5 | 1 Tem 2023 |
- CVE-2024-232227İzleyin
WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF
OrtaCVSS 6,8İstismar yokEPSS %0cartflows · woocommerce cart abandonment recovery3 Nis 2024
- CVE-2024-463225İzleyin
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scr
OrtaCVSS 6,4İstismar yokEPSS %0brainstormforce · cartflows – funnel builder & checkout plugin for woocommerce19 Haz 2024
- CVE-2023-3668624İzleyin
WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0cartflows · cartflows5 Ağu 2023
- CVE-2021-2433019İzleyin
Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID
OrtaCVSS 4,8İstismar yokEPSS %1cartflows · cartflows1 Haz 2021
- CVE-2019-2515117İzleyin
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
OrtaCVSS 4,3İstismar yokEPSS %1cartflows · cartflows6 Haz 2023
- CVE-2020-3673617İzleyin
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0cartflows · cartflows1 Tem 2023