essentialplugin kayıtları

essentialplugin üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %41,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

12 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-38077İstismar yok	WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)essentialplugin · popup anything · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	29 Mar 2023
29İzleyin	CVE-2024-4194İstismar yok	Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Executionessentialplugin · album and image gallery plus lightbox · CWE-94 pre-auth RCE	Yüksek7,3	—	%0,5	5 Haz 2024
24İzleyin	CVE-2022-2115İstismar yok	Popup Anything < 2.1.7 - Reflected Cross-Site Scriptingessentialplugin · popup anything · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	25 Tem 2022
21İzleyin	CVE-2021-24883İstismar yok	Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site Scriptingessentialplugin · popup anything · CWE-79 XSS	Orta5,4	—	%0,8	29 Kas 2021
21İzleyin	CVE-2022-4747İstismar yok	Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcodeessentialplugin · download post category image with grid and slider · CWE-79 XSS	Orta5,4	—	%0,7	6 Şub 2023
21İzleyin	CVE-2022-4824İstismar yok	WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcodeessentialplugin · wp blog and widget · CWE-79 XSS	Orta5,4	—	%0,6	6 Şub 2023
21İzleyin	CVE-2023-25703İstismar yok	WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilitywp onlinesupport, essential plugin · meta slider and carousel with lightbox · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	9 Ara 2024
21İzleyin	CVE-2023-48273İstismar yok	WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilitywp onlinesupport, essential plugin · preloader for website · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	11 Haz 2024
21İzleyin	CVE-2022-4791İstismar yok	Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcodeessentialplugin · product slider and carousel with category with woocommerce · CWE-79 XSS	Orta5,4	—	%0,5	21 Şub 2023
21İzleyin	CVE-2023-30488İstismar yok	WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerabilitywp onlinesupport, essential plugin · featured post creative · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,4	9 Ara 2024
21İzleyin	CVE-2023-38516İstismar yok	WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)essentialplugin · audio player with playlist ultimate · CWE-79 XSS	Orta5,4	—	%0,4	3 Eyl 2023
21İzleyin	CVE-2022-45818İstismar yok	WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)essentialplugin · hero banner ultimate · CWE-79 XSS	Orta5,4	—	%0,4	4 May 2023

CVE-2022-38077
35İzleyin
WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
essentialplugin · popup anything29 Mar 2023
CVE-2024-4194
29İzleyin
Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution
YüksekCVSS 7,3İstismar yokEPSS %0
- pre-auth RCE
essentialplugin · album and image gallery plus lightbox5 Haz 2024
CVE-2022-2115
24İzleyin
Popup Anything < 2.1.7 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
essentialplugin · popup anything25 Tem 2022
CVE-2021-24883
21İzleyin
Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
essentialplugin · popup anything29 Kas 2021
CVE-2022-4747
21İzleyin
Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
essentialplugin · download post category image with grid and slider6 Şub 2023
CVE-2022-4824
21İzleyin
WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
essentialplugin · wp blog and widget6 Şub 2023
CVE-2023-25703
21İzleyin
WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wp onlinesupport, essential plugin · meta slider and carousel with lightbox9 Ara 2024
CVE-2023-48273
21İzleyin
WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wp onlinesupport, essential plugin · preloader for website11 Haz 2024
CVE-2022-4791
21İzleyin
Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
essentialplugin · product slider and carousel with category with woocommerce21 Şub 2023
CVE-2023-30488
21İzleyin
WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wp onlinesupport, essential plugin · featured post creative9 Ara 2024
CVE-2023-38516
21İzleyin
WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
essentialplugin · audio player with playlist ultimate3 Eyl 2023
CVE-2022-45818
21İzleyin
WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
essentialplugin · hero banner ultimate4 May 2023