dFactory kayıtları

dfactory üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %66,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2024-43924İstismar yok	WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerabilitydfactory · responsive lightbox · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,5	23 Eki 2024
35İzleyin	CVE-2024-31252İstismar yok	WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerabilitydfactory · responsive lightbox \& gallery · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	9 Haz 2024
27İzleyin	CVE-2025-3742İstismar yok	Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSSdfactory · responsive lightbox · CWE-79 XSS	Orta6,8	—	%0,5	15 May 2025
24İzleyin	CVE-2017-2243İstismar yok	Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML vdfactory · responsive lightbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,5	7 Tem 2017
21İzleyin	CVE-2023-0076İstismar yok	Download Attachments < 1.3 - Contributor+ Stored XSSdfactory · download attachments · CWE-79 XSS	Orta5,4	—	%0,5	6 Mar 2023
21İzleyin	CVE-2023-49174İstismar yok	WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)dfactory · responsive lightbox · CWE-79 XSS	Orta5,4	—	%0,4	15 Ara 2023
21İzleyin	CVE-2024-6870İstismar yok	Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Uploaddfactory · responsive lightbox · CWE-79 XSS	Orta5,4	—	%0,3	22 Ağu 2024
21İzleyin	CVE-2025-5093İstismar yok	Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSSdfactory · responsive lightbox · CWE-79 XSS	Orta5,4	—	%0,2	27 Haz 2025
19İzleyin	CVE-2021-24613İstismar yok	Post Views Counter < 1.3.5 - Authenticated Stored XSSdfactory · post views counter · CWE-79 XSS	Orta4,8	—	%0,6	20 Eyl 2021

CVE-2024-43924
39İzleyin
WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
dfactory · responsive lightbox23 Eki 2024
CVE-2024-31252
35İzleyin
WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
dfactory · responsive lightbox \& gallery9 Haz 2024
CVE-2025-3742
27İzleyin
Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS
OrtaCVSS 6,8İstismar yokEPSS %1
- XSS
dfactory · responsive lightbox15 May 2025
CVE-2017-2243
24İzleyin
Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML v
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
dfactory · responsive lightbox7 Tem 2017
CVE-2023-0076
21İzleyin
Download Attachments < 1.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
dfactory · download attachments6 Mar 2023
CVE-2023-49174
21İzleyin
WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
dfactory · responsive lightbox15 Ara 2023
CVE-2024-6870
21İzleyin
Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
dfactory · responsive lightbox22 Ağu 2024
CVE-2025-5093
21İzleyin
Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
dfactory · responsive lightbox27 Haz 2025
CVE-2021-24613
19İzleyin
Post Views Counter < 1.3.5 - Authenticated Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
dfactory · post views counter20 Eyl 2021