Skip to content
Noroxi

2code records

21 published records for vendor 2code.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
38.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2022-3688
    35Monitor

    WPQA < 5.9 - Follow/Unfollow via CSRF

    HighCVSS 8.8No exploitEPSS 1%

    2code · wpqa builderNov 21, 2022

  • CVE-2024-2376
    35Monitor

    WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF

    HighCVSS 8.8No exploitEPSS 0%

    2code · wpqa builderJul 3, 2024

  • CVE-2024-2232
    32Monitor

    Himer - Social Questions and Answers < 2.1.3 - CSRF While Sending the Invites

    HighCVSS 8.1No exploitEPSS 0%

    2code · himerAug 5, 2024

  • CVE-2022-1323
    26Monitor

    Discy < 5.0 - Subscriber+ Broken Access Control to change settings

    MediumCVSS 6.5No exploitEPSS 1%

    2code · discyAug 8, 2022

  • CVE-2022-1422
    26Monitor

    Discy < 5.2 - Restore Default Settings via CSRF

    MediumCVSS 6.5No exploitEPSS 1%

    2code · discyJun 8, 2022

  • CVE-2022-1424
    26Monitor

    Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions

    MediumCVSS 6.5No exploitEPSS 1%

    2code · ask meJun 8, 2022

  • CVE-2024-2231
    26Monitor

    Himer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR

    MediumCVSS 6.5No exploitEPSS 0%

    2code · himerJul 3, 2024

  • CVE-2022-1597
    25Monitor

    WPQA < 5.4 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 3%

    2code · wpqa builderJun 8, 2022

  • CVE-2022-1241
    24Monitor

    Ask Me < 6.8.2 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    2code · ask meJun 8, 2022

  • CVE-2022-1598
    23Monitor

    WPQA < 5.5 - Unauthenticated Private Message Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 5%

    2code · wpqa builderJun 8, 2022

  • CVE-2022-1051
    21Monitor

    WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields

    MediumCVSS 5.4Proof of conceptEPSS 1%

    2code · wpqa builderMay 16, 2022

  • CVE-2024-2234
    21Monitor

    Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    2code · himerJul 3, 2024

  • CVE-2024-2375
    21Monitor

    WPQA < 6.1.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    2code · wpqa builderJul 3, 2024

  • CVE-2022-1421
    17Monitor

    Discy < 5.2 - Settings Update via CSRF

    MediumCVSS 4.3Proof of conceptEPSS 1%

    2code · discyJun 8, 2022

  • CVE-2022-1425
    17Monitor

    WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR

    MediumCVSS 4.3No exploitEPSS 1%

    2code · wpqa builderMay 16, 2022

  • CVE-2022-2198
    17Monitor

    WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR

    MediumCVSS 4.3No exploitEPSS 1%

    2code · wpqa builderAug 22, 2022

  • CVE-2022-1349
    17Monitor

    WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR

    MediumCVSS 4.3No exploitEPSS 1%

    2code · wpqa builderMay 16, 2022

  • CVE-2024-2233
    17Monitor

    Himer - Social Questions and Answers < 2.1.1 - Multiple CSRF on the Group Section

    MediumCVSS 4.3No exploitEPSS 0%

    2code · himerJul 3, 2024

  • CVE-2024-2040
    17Monitor

    Himer - Social Questions and Answers < 2.1.1 - Arbitrary Group Joining via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    2code · himerJul 3, 2024

  • CVE-2024-2235
    17Monitor

    Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    2code · himerJul 3, 2024

  • CVE-2022-3343
    14Monitor

    WPQA < 5.9.3 - Missing validation lead to functionality abuse

    LowCVSS 3.5No exploitEPSS 0%

    2code · wpqa builderJan 9, 2023