ngothang records
8 published records for vendor ngothang.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2024-6859No exploit | WP MultiTasking <= 0.1.12 - Reflected XSS via Shortcodengothang · wp multitasking · CWE-79 | Medium5.4 | — | 0.2% | Sep 8, 2024 |
19Monitor | CVE-2024-8189No exploit | WP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scriptingngothang · wp multitasking · CWE-79 | Medium4.8 | — | 0.4% | Sep 28, 2024 |
17Monitor | CVE-2024-6853No exploit | WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Sep 8, 2024 |
17Monitor | CVE-2024-6852No exploit | WP MultiTasking <= 0.1.12 - Settings Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Sep 8, 2024 |
17Monitor | CVE-2024-6855No exploit | WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Sep 8, 2024 |
17Monitor | CVE-2024-6856No exploit | WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Sep 8, 2024 |
17Monitor | CVE-2024-6860No exploit | WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Apr 9, 2025 |
17Monitor | CVE-2024-6857No exploit | WP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRFngothang · wp multitasking · CWE-352 | Medium4.3 | — | 0.2% | Apr 9, 2025 |
- CVE-2024-685921Monitor
WP MultiTasking <= 0.1.12 - Reflected XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%ngothang · wp multitaskingSep 8, 2024
- CVE-2024-818919Monitor
WP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%ngothang · wp multitaskingSep 28, 2024
- CVE-2024-685317Monitor
WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingSep 8, 2024
- CVE-2024-685217Monitor
WP MultiTasking <= 0.1.12 - Settings Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingSep 8, 2024
- CVE-2024-685517Monitor
WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingSep 8, 2024
- CVE-2024-685617Monitor
WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingSep 8, 2024
- CVE-2024-686017Monitor
WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingApr 9, 2025
- CVE-2024-685717Monitor
WP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%ngothang · wp multitaskingApr 9, 2025