Skip to content
Noroxi

scriptsbundle records

6 published records for vendor scriptsbundle.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2024-11349
    39Monitor

    AdForest <= 5.1.6 - Authentication Bypass

    CriticalCVSS 9.8No exploitEPSS 1%

    scriptsbundle · adforestDec 21, 2024

  • CVE-2024-12857
    39Monitor

    AdForest <= 5.1.8 - Authentication Bypass

    CriticalCVSS 9.8No exploitEPSS 1%

    scriptsbundle · adforestJan 22, 2025

  • CVE-2024-11350
    39Monitor

    AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover

    CriticalCVSS 9.8No exploitEPSS 1%

    scriptsbundle · adforestJan 8, 2025

  • CVE-2019-15870
    21Monitor

    The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.

    MediumCVSS 5.4No exploitEPSS 1%

    scriptsbundle · carspotSep 3, 2019

  • CVE-2025-0169
    21Monitor

    DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    scriptsbundle · dwt listingFeb 8, 2025

  • CVE-2024-12855
    21Monitor

    AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion

    MediumCVSS 5.4No exploitEPSS 0%

    scriptsbundle · adforestJan 8, 2025