CRUDLab kayıtları
crudlab üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-306 Missing Authentication for Critical Function1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2019-13344Kavram kanıtı | An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to crudlab · wp like button · CWE-306 | Orta5,3 | — | %45,1 | 5 Tem 2019 |
35İzleyin | CVE-2023-40199İstismar yok | WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)crudlab · wp like button · CWE-352 | Yüksek8,8 | — | %0,3 | 3 Eki 2023 |
24İzleyin | CVE-2023-32965İstismar yok | WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)crudlab · jazz popups · CWE-79 | Orta6,1 | — | %0,4 | 18 Tem 2023 |
24İzleyin | CVE-2023-32966İstismar yok | WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSScrudlab · jazz popups · CWE-352 | Orta6,1 | — | %0,2 | 7 Kas 2023 |
- CVE-2019-1334435İzleyin
An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to
OrtaCVSS 5,3Kavram kanıtıEPSS %45crudlab · wp like button5 Tem 2019
- CVE-2023-4019935İzleyin
WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0crudlab · wp like button3 Eki 2023
- CVE-2023-3296524İzleyin
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0crudlab · jazz popups18 Tem 2023
- CVE-2023-3296624İzleyin
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0crudlab · jazz popups7 Kas 2023