ZAYTECH kayıtları
zaytech üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-862 Missing Authorization4
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-43253İstismar yok | WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerabilityzaytech · smart online order for clover · CWE-862 | Kritik9,8 | — | %0,6 | 1 Kas 2024 |
35İzleyin | CVE-2024-43254İstismar yok | WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerabilityzaytech · smart online order for clover · CWE-862 | Yüksek8,8 | — | %0,4 | 1 Kas 2024 |
35İzleyin | CVE-2024-31238İstismar yok | WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerabilityzaytech · smart online order for clover · CWE-352 | Yüksek8,8 | — | %0,2 | 12 Nis 2024 |
26İzleyin | CVE-2024-7032İstismar yok | Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletionzaytech · smart online order for clover · CWE-862 | Orta6,5 | — | %0,5 | 21 Ağu 2024 |
24İzleyin | CVE-2024-8787İstismar yok | Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scriptingzaytech · smart online order for clover · CWE-79 | Orta6,1 | — | %0,4 | 15 Eki 2024 |
24İzleyin | CVE-2023-46312İstismar yok | WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)zaytech · smart online order for clover · CWE-79 | Orta6,1 | — | %0,3 | 31 Eki 2023 |
21İzleyin | CVE-2024-0626İstismar yok | WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handlerelbanyaoui · clover payment gateway by zaytech for woocommerce · CWE-284 | Orta5,3 | — | %0,6 | 9 Nis 2024 |
21İzleyin | CVE-2024-9895İstismar yok | Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcodezaytech · smart online order for clover · CWE-79 | Orta5,4 | — | %0,4 | 15 Eki 2024 |
21İzleyin | CVE-2024-29115İstismar yok | WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerabilityzaytech · smart online order for clover · CWE-79 | Orta5,4 | — | %0,3 | 19 Mar 2024 |
17İzleyin | CVE-2024-7030İstismar yok | Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Updatezaytech · smart online order for clover · CWE-862 | Orta4,3 | — | %0,4 | 21 Ağu 2024 |
- CVE-2024-4325339İzleyin
WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %1zaytech · smart online order for clover1 Kas 2024
- CVE-2024-4325435İzleyin
WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0zaytech · smart online order for clover1 Kas 2024
- CVE-2024-3123835İzleyin
WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0zaytech · smart online order for clover12 Nis 2024
- CVE-2024-703226İzleyin
Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion
OrtaCVSS 6,5İstismar yokEPSS %0zaytech · smart online order for clover21 Ağu 2024
- CVE-2024-878724İzleyin
Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0zaytech · smart online order for clover15 Eki 2024
- CVE-2023-4631224İzleyin
WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0zaytech · smart online order for clover31 Eki 2023
- CVE-2024-062621İzleyin
WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler
OrtaCVSS 5,3İstismar yokEPSS %1elbanyaoui · clover payment gateway by zaytech for woocommerce9 Nis 2024
- CVE-2024-989521İzleyin
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0zaytech · smart online order for clover15 Eki 2024
- CVE-2024-2911521İzleyin
WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0zaytech · smart online order for clover19 Mar 2024
- CVE-2024-703017İzleyin
Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
OrtaCVSS 4,3İstismar yokEPSS %0zaytech · smart online order for clover21 Ağu 2024