WPBrigade kayıtları

wpbrigade üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %20
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2019-15872İstismar yok	The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.wpbrigade · loginpress · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%2,2	3 Eyl 2019
24İzleyin	CVE-2022-0347İstismar yok	LoginPress < 1.5.12 - Reflected Cross-Site Scriptingwpbrigade · loginpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	7 Mar 2022
21İzleyin	CVE-2021-24486İstismar yok	Simple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSSwpbrigade · simple social media share buttons · CWE-79 XSS	Orta5,4	—	%0,6	23 Ağu 2021
21İzleyin	CVE-2023-5845İstismar yok	Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Accesswpbrigade · simple social buttons · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Orta5,3	—	%0,6	27 Kas 2023
21İzleyin	CVE-2022-4625İstismar yok	Login Logout Menu < 1.4.0 - Contributor+ Stored XSS in Shortcodewpbrigade · login logout menu · CWE-79 XSS	Orta5,4	—	%0,5	23 Oca 2023
21İzleyin	CVE-2022-41839İstismar yok	WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerabilitywpbrigade · loginpress · CWE-264 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	18 Kas 2022
21İzleyin	CVE-2022-4622İstismar yok	Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcodewpbrigade · login logout menu · CWE-79 XSS	Orta5,4	—	%0,5	21 Şub 2023
19İzleyin	CVE-2021-24656İstismar yok	Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scriptingwpbrigade · simple social buttons · CWE-79 XSS	Orta4,8	—	%0,6	11 Eki 2021
19İzleyin	CVE-2024-13610İstismar yok	Simple Social Media Share Buttons < 6.0.0 - Admin+ Stored XSSwpbrigade · simple social buttons · CWE-79 XSS	Orta4,8	—	%0,3	15 Nis 2025
17İzleyin	CVE-2019-15871İstismar yok	The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.wpbrigade · loginpress · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,9	3 Eyl 2019

CVE-2019-15872
40Planlayın
The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- SQL enjeksiyonu
wpbrigade · loginpress3 Eyl 2019
CVE-2022-0347
24İzleyin
LoginPress < 1.5.12 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
wpbrigade · loginpress7 Mar 2022
CVE-2021-24486
21İzleyin
Simple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
wpbrigade · simple social media share buttons23 Ağu 2021
CVE-2023-5845
21İzleyin
Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wpbrigade · simple social buttons27 Kas 2023
CVE-2022-4625
21İzleyin
Login Logout Menu < 1.4.0 - Contributor+ Stored XSS in Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
wpbrigade · login logout menu23 Oca 2023
CVE-2022-41839
21İzleyin
WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wpbrigade · loginpress18 Kas 2022
CVE-2022-4622
21İzleyin
Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wpbrigade · login logout menu21 Şub 2023
CVE-2021-24656
19İzleyin
Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
wpbrigade · simple social buttons11 Eki 2021
CVE-2024-13610
19İzleyin
Simple Social Media Share Buttons < 6.0.0 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wpbrigade · simple social buttons15 Nis 2025
CVE-2019-15871
17İzleyin
The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.
OrtaCVSS 4,3İstismar yokEPSS %1
- Erişim denetimi (IDOR)
wpbrigade · loginpress3 Eyl 2019