PeepSo kayıtları
peepso üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %73,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-269 Improper Privilege Management1
- CWE-532 Insertion of Sensitive Information into Log File1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2016-10968İstismar yok | The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.peepso · peepso · CWE-269 | Yüksek8,8 | — | %1,6 | 16 Eyl 2019 |
35İzleyin | CVE-2023-32092İstismar yok | WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)peepso · peepso · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-25967İstismar yok | WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)peepso · peepso · CWE-352 | Yüksek8,8 | — | %0,3 | 3 May 2023 |
35İzleyin | CVE-2023-39925İstismar yok | WordPress Community by PeepSo Plugin <= 6.1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)peepso · peepso · CWE-352 | Yüksek8,8 | — | %0,3 | 22 Kas 2023 |
35İzleyin | CVE-2022-41633İstismar yok | WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)peepso · peepso · CWE-352 | Yüksek8,8 | — | %0,2 | 4 Nis 2023 |
24İzleyin | CVE-2024-0187İstismar yok | Community by PeepSo < 6.3.1.2 - Reflected XSSpeepso · peepso · CWE-79 | Orta6,1 | — | %0,5 | 16 Oca 2024 |
24İzleyin | CVE-2023-48746İstismar yok | WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)peepso · peepso · CWE-79 | Orta6,1 | — | %0,4 | 30 Kas 2023 |
21İzleyin | CVE-2023-27630İstismar yok | WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosurepeepso · community by peepso · CWE-200 | Orta5,3 | — | %0,5 | 26 Mar 2024 |
21İzleyin | CVE-2024-7426İstismar yok | Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosurepeepso · peepso · CWE-200 | Orta5,3 | — | %0,5 | 24 Eyl 2024 |
21İzleyin | CVE-2024-25923İstismar yok | WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerabilitypeepso · community by peepso · CWE-532 | Orta5,3 | — | %0,4 | 28 Mar 2024 |
21İzleyin | CVE-2023-47850İstismar yok | WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)peepso · peepso · CWE-79 | Orta5,4 | — | %0,4 | 30 Kas 2023 |
21İzleyin | CVE-2024-22158İstismar yok | WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)peepso · peepso · CWE-79 | Orta5,4 | — | %0,3 | 31 Oca 2024 |
19İzleyin | CVE-2024-7618İstismar yok | Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via contenpeepso · peepso · CWE-79 | Orta4,8 | — | %0,3 | 10 Eyl 2024 |
19İzleyin | CVE-2024-7655İstismar yok | Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scriptingpeepso · peepso · CWE-79 | Orta4,8 | — | %0,3 | 10 Eyl 2024 |
17İzleyin | CVE-2023-7125İstismar yok | Community by PeepSo < 6.3.1.2 - User Post Creation via CSRFpeepso · peepso · CWE-352 | Orta4,3 | — | %0,2 | 16 Oca 2024 |
- CVE-2016-1096835İzleyin
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.
YüksekCVSS 8,8İstismar yokEPSS %2peepso · peepso16 Eyl 2019
- CVE-2023-3209235İzleyin
WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0peepso · peepso9 Kas 2023
- CVE-2023-2596735İzleyin
WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0peepso · peepso3 May 2023
- CVE-2023-3992535İzleyin
WordPress Community by PeepSo Plugin <= 6.1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0peepso · peepso22 Kas 2023
- CVE-2022-4163335İzleyin
WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0peepso · peepso4 Nis 2023
- CVE-2024-018724İzleyin
Community by PeepSo < 6.3.1.2 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %1peepso · peepso16 Oca 2024
- CVE-2023-4874624İzleyin
WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0peepso · peepso30 Kas 2023
- CVE-2023-2763021İzleyin
WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure
OrtaCVSS 5,3İstismar yokEPSS %1peepso · community by peepso26 Mar 2024
- CVE-2024-742621İzleyin
Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0peepso · peepso24 Eyl 2024
- CVE-2024-2592321İzleyin
WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0peepso · community by peepso28 Mar 2024
- CVE-2023-4785021İzleyin
WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0peepso · peepso30 Kas 2023
- CVE-2024-2215821İzleyin
WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0peepso · peepso31 Oca 2024
- CVE-2024-761819İzleyin
Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via conten
OrtaCVSS 4,8İstismar yokEPSS %0peepso · peepso10 Eyl 2024
- CVE-2024-765519İzleyin
Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0peepso · peepso10 Eyl 2024
- CVE-2023-712517İzleyin
Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF
OrtaCVSS 4,3İstismar yokEPSS %0peepso · peepso16 Oca 2024