CreativeThemes kayıtları
creativethemes üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %43,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-20 Improper Input Validation2
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-31382İstismar yok | WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemes · blocksy · CWE-352 | Yüksek8,8 | — | %0,2 | 15 Nis 2024 |
35İzleyin | CVE-2024-31932İstismar yok | WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemes · blocksy companion · CWE-352 | Yüksek8,8 | — | %0,2 | 11 Nis 2024 |
35İzleyin | CVE-2024-37469İstismar yok | WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemes · blocksy · CWE-352 | Yüksek8,8 | — | %0,2 | 2 Oca 2025 |
25İzleyin | CVE-2024-2392İstismar yok | Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy companion · CWE-79 | Orta6,4 | — | %0,3 | 21 Mar 2024 |
21İzleyin | CVE-2024-4487İstismar yok | Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploadscreativethemes · blocksy companion · CWE-79 | Orta5,4 | — | %0,4 | 14 May 2024 |
21İzleyin | CVE-2024-3747İstismar yok | Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me blockcreativethemes · blocksy · CWE-20 | Orta5,4 | — | %0,4 | 2 May 2024 |
21İzleyin | CVE-2023-23898İstismar yok | WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)creativethemes · blocksy companion · CWE-79 | Orta5,4 | — | %0,3 | 6 Nis 2023 |
21İzleyin | CVE-2024-4158İstismar yok | Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 14 May 2024 |
21İzleyin | CVE-2024-24871İstismar yok | WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerabilitycreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 8 Şub 2024 |
21İzleyin | CVE-2024-1767İstismar yok | Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 9 Mar 2024 |
21İzleyin | CVE-2024-32961İstismar yok | WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerabilitycreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 25 Nis 2024 |
21İzleyin | CVE-2024-5439İstismar yok | Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy · CWE-20 | Orta5,4 | — | %0,3 | 5 Haz 2024 |
21İzleyin | CVE-2024-4943İstismar yok | Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 20 May 2024 |
21İzleyin | CVE-2024-11420İstismar yok | Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemes · blocksy · CWE-79 | Orta5,4 | — | %0,3 | 5 Ara 2024 |
19İzleyin | CVE-2024-35633İstismar yok | WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerabilitycreativethemes · blocksy companion · CWE-918 | Orta4,9 | — | %0,3 | 3 Haz 2024 |
17İzleyin | CVE-2023-1911İstismar yok | Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Accesscreativethemes · blocksy companion · CWE-639 | Orta4,3 | — | %0,6 | 2 May 2023 |
- CVE-2024-3138235İzleyin
WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0creativethemes · blocksy15 Nis 2024
- CVE-2024-3193235İzleyin
WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0creativethemes · blocksy companion11 Nis 2024
- CVE-2024-3746935İzleyin
WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0creativethemes · blocksy2 Oca 2025
- CVE-2024-239225İzleyin
Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 6,4İstismar yokEPSS %0creativethemes · blocksy companion21 Mar 2024
- CVE-2024-448721İzleyin
Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy companion14 May 2024
- CVE-2024-374721İzleyin
Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy2 May 2024
- CVE-2023-2389821İzleyin
WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy companion6 Nis 2023
- CVE-2024-415821İzleyin
Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy14 May 2024
- CVE-2024-2487121İzleyin
WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy8 Şub 2024
- CVE-2024-176721İzleyin
Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy9 Mar 2024
- CVE-2024-3296121İzleyin
WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy25 Nis 2024
- CVE-2024-543921İzleyin
Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy5 Haz 2024
- CVE-2024-494321İzleyin
Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy20 May 2024
- CVE-2024-1142021İzleyin
Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0creativethemes · blocksy5 Ara 2024
- CVE-2024-3563319İzleyin
WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0creativethemes · blocksy companion3 Haz 2024
- CVE-2023-191117İzleyin
Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access
OrtaCVSS 4,3İstismar yokEPSS %1creativethemes · blocksy companion2 May 2023