İçeriğe atla
Noroxi

Wpmet kayıtları

wpmet üreticisine ait 69 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%23,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

69 kayıt
  • CVE-2024-9234
    42Planlayın

    GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    ataurr · gutenkit – page builder blocks, patterns, and templates for gutenberg block editor11 Eki 2024

  • CVE-2022-0788
    41Planlayın

    WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    wpmet · fundengine8 Haz 2022

  • CVE-2023-0714
    39İzleyin

    Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %1

    wpmet · metform elementor contact form builder17 Ağu 2024

  • CVE-2023-50903
    39İzleyin

    WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    wpmet · metform elementor contact form builder9 Ara 2024

  • CVE-2024-4404
    38İzleyin

    ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery

    KritikCVSS 9,6İstismar yokEPSS %0

    wpmet · elementskit14 Haz 2024

  • CVE-2024-2047
    35İzleyin

    ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpmet · elements kit elementor addons30 Mar 2024

  • CVE-2024-3499
    35İzleyin

    ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpmet · elements kit elementor addons2 May 2024

  • CVE-2024-3500
    35İzleyin

    ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpmet · elementskit2 May 2024

  • CVE-2024-33570
    35İzleyin

    WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpmet · metform elementor contact form builder6 May 2024

  • CVE-2024-6698
    35İzleyin

    FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpmet · fundengine1 Ağu 2024

  • CVE-2023-28987
    35İzleyin

    WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpmet · wp ultimate review12 Kas 2023

  • CVE-2022-45371
    35İzleyin

    WordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpmet · shopengine25 May 2023

  • CVE-2023-46085
    35İzleyin

    WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpmet · wp ultimate review22 Eki 2023

  • CVE-2023-0084
    33İzleyin

    Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %29

    wpmet · metform elementor contact form builder2 Mar 2023

  • CVE-2022-1442
    33İzleyin

    Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    wpmet · metform elementor contact form builder10 May 2022

  • CVE-2023-0721
    31İzleyin

    Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection

    YüksekCVSS 7,8İstismar yokEPSS %1

    wpmet · metform elementor contact form builder9 Haz 2023

  • CVE-2024-4266
    30İzleyin

    MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure

    YüksekCVSS 7,5İstismar yokEPSS %1

    wpmet · metform elementor contact form builder11 Haz 2024

  • CVE-2024-21746
    30İzleyin

    WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmet · wp ultimate review17 May 2024

  • CVE-2024-32683
    30İzleyin

    WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmet · wp ultimate review19 Nis 2024

  • CVE-2024-32684
    30İzleyin

    WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmet · wp ultimate review22 Nis 2024

  • CVE-2023-0688
    26İzleyin

    Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode

    OrtaCVSS 6,5İstismar yokEPSS %1

    wpmet · metform elementor contact form builder9 Haz 2023

  • CVE-2024-43996
    26İzleyin

    WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %1

    wpmet · elementskit22 Eyl 2024

  • CVE-2022-47160
    26İzleyin

    WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure

    OrtaCVSS 6,5İstismar yokEPSS %1

    wpmet · wp social login and register social counter19 Oca 2024

  • CVE-2023-0085
    21İzleyin

    Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass

    OrtaCVSS 5,3İstismar yokEPSS %1

    wpmet · metform elementor contact form builder2 Mar 2023

  • CVE-2023-1843
    21İzleyin

    Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization

    OrtaCVSS 5,3İstismar yokEPSS %1

    wpmet · metform elementor contact form builder9 Haz 2023