Skip to content
Noroxi

bootstrapped records

17 published records for vendor bootstrapped.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2024-1206
    35Monitor

    WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton

    HighCVSS 8.8No exploitEPSS 1%

    bootstrapped · wp recipe makerFeb 28, 2024

  • CVE-2023-6970
    24Monitor

    WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer

    MediumCVSS 6.1Proof of conceptEPSS 1%

    bootstrapped · wp recipe makerJan 18, 2024

  • CVE-2019-15836
    21Monitor

    The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp ultimate recipeAug 30, 2019

  • CVE-2023-0375
    21Monitor

    Easy Affiliate Links < 3.7.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · easy affiliate linksFeb 21, 2023

  • CVE-2021-24635
    21Monitor

    Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · visual link previewSep 20, 2021

  • CVE-2021-24933
    21Monitor

    Dynamic Widgets <= 1.5.16 - Reflected Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · dynamic widgetsFeb 28, 2022

  • CVE-2024-0381
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp recipe makerJan 18, 2024

  • CVE-2024-0384
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp recipe makerFeb 5, 2024

  • CVE-2024-0382
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp recipe makerFeb 5, 2024

  • CVE-2022-4468
    21Monitor

    WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp recipe makerJan 9, 2023

  • CVE-2024-0255
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color

    MediumCVSS 5.4No exploitEPSS 1%

    bootstrapped · wp recipe makerFeb 5, 2024

  • CVE-2024-0383
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'

    MediumCVSS 5.4No exploitEPSS 0%

    bootstrapped · wp recipe makerJun 19, 2024

  • CVE-2024-9650
    21Monitor

    WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'

    MediumCVSS 5.4No exploitEPSS 0%

    bootstrapped · wp recipe makerOct 24, 2024

  • CVE-2023-6958
    21Monitor

    WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    bootstrapped · wp recipe makerJan 18, 2024

  • CVE-2024-3490
    21Monitor

    WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    bootstrapped · wp recipe makerMay 2, 2024

  • CVE-2024-1571
    19Monitor

    WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed

    MediumCVSS 4.8No exploitEPSS 0%

    bootstrapped · wp recipe makerApr 9, 2024

  • CVE-2024-0380
    17Monitor

    WP Recipe Maker <= 9.1.0 - Directory Traversal

    MediumCVSS 4.3No exploitEPSS 1%

    bootstrapped · wp recipe makerFeb 5, 2024