CodeRevolution kayıtları
coderevolution üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %44,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-269 Improper Privilege Management2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization2
- CWE-20 Improper Input Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-9265İstismar yok | Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalationcoderevolution · echo rss feed post generator · CWE-269 | Kritik9,8 | — | %0,6 | 1 Eki 2024 |
39İzleyin | CVE-2024-31290İstismar yok | WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerabilitycoderevolution · demo my wordpress · CWE-269 | Kritik9,8 | — | %0,5 | 17 May 2024 |
35İzleyin | CVE-2024-13882İstismar yok | Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Uploadcoderevolution · aiomatic · CWE-434 | Yüksek8,8 | — | %0,8 | 8 Mar 2025 |
35İzleyin | CVE-2024-34435İstismar yok | WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerabilitycoderevolution · aiomatic · CWE-862 | Yüksek8,8 | — | %0,3 | 9 Haz 2024 |
30İzleyin | CVE-2025-6206İstismar yok | Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Uploadcoderevolution · aiomatic · CWE-434 | Yüksek7,5 | — | %0,5 | 24 Haz 2025 |
24İzleyin | CVE-2023-49176İstismar yok | WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)coderevolution · wp pocket urls · CWE-79 | Orta6,1 | — | %0,4 | 15 Ara 2023 |
21İzleyin | CVE-2024-5969İstismar yok | AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sendingcoderevolution · aiomatic · CWE-20 | Orta5,3 | — | %0,3 | 27 Tem 2024 |
21İzleyin | CVE-2024-51681İstismar yok | WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilitycoderevolution · wp pocket urls · CWE-79 | Orta5,4 | — | %0,3 | 4 Kas 2024 |
21İzleyin | CVE-2024-13816İstismar yok | Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actionscoderevolution · aiomatic · CWE-862 | Orta5,4 | — | %0,2 | 8 Mar 2025 |
- CVE-2024-926539İzleyin
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %1coderevolution · echo rss feed post generator1 Eki 2024
- CVE-2024-3129039İzleyin
WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1coderevolution · demo my wordpress17 May 2024
- CVE-2024-1388235İzleyin
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1coderevolution · aiomatic8 Mar 2025
- CVE-2024-3443535İzleyin
WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0coderevolution · aiomatic9 Haz 2024
- CVE-2025-620630İzleyin
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 7,5İstismar yokEPSS %1coderevolution · aiomatic24 Haz 2025
- CVE-2023-4917624İzleyin
WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0coderevolution · wp pocket urls15 Ara 2023
- CVE-2024-596921İzleyin
AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending
OrtaCVSS 5,3İstismar yokEPSS %0coderevolution · aiomatic27 Tem 2024
- CVE-2024-5168121İzleyin
WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0coderevolution · wp pocket urls4 Kas 2024
- CVE-2024-1381621İzleyin
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
OrtaCVSS 5,4İstismar yokEPSS %0coderevolution · aiomatic8 Mar 2025