Skip to content
Noroxi

Supsystic records

43 published records for vendor Supsystic.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
25.6%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

43 records
  • CVE-2023-3186
    39Monitor

    Supsystic Popup < 1.10.19 - Prototype Pollution

    CriticalCVSS 9.8No exploitEPSS 1%

    supsystic · popupJul 17, 2023

  • CVE-2023-39997
    39Monitor

    WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    supsystic · popupDec 13, 2024

  • CVE-2023-51353
    39Monitor

    WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    supsystic · popupDec 9, 2024

  • CVE-2024-48042
    36Monitor

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    supsystic · contact form by supsysticOct 16, 2024

  • CVE-2024-52434
    36Monitor

    WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    supsystic · popupNov 18, 2024

  • CVE-2020-12075
    35Monitor

    The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.

    HighCVSS 8.8No exploitEPSS 1%

    supsystic · data tables generatorApr 22, 2020

  • CVE-2022-33960
    35Monitor

    WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · social share buttonsJul 22, 2022

  • CVE-2022-27235
    35Monitor

    WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · social share buttonsJul 22, 2022

  • CVE-2020-12076
    35Monitor

    The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · data tables generatorApr 22, 2020

  • CVE-2016-10918
    35Monitor

    The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · photo galleryAug 22, 2019

  • CVE-2020-9394
    35Monitor

    An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · pricing table by supsysticFeb 25, 2020

  • CVE-2016-10915
    35Monitor

    The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · popupAug 20, 2019

  • CVE-2017-18512
    35Monitor

    The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · newsletter by supsysticAug 14, 2019

  • CVE-2024-47330
    35Monitor

    Broken Access Control vulnerability on multiple WordPress plugins by Supsystic

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · sliderSep 25, 2024

  • CVE-2023-2528
    35Monitor

    Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · contact formMay 16, 2023

  • CVE-2022-47155
    35Monitor

    WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · sliderMar 14, 2023

  • CVE-2023-5756
    35Monitor

    Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · digital publications by supsysticDec 9, 2023

  • CVE-2023-22714
    35Monitor

    WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · coming soonMay 22, 2023

  • CVE-2023-45068
    35Monitor

    WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · contact formOct 12, 2023

  • CVE-2023-33926
    35Monitor

    WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · easy google mapsMay 28, 2023

  • CVE-2024-31269
    35Monitor

    WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    supsystic · easy google mapsApr 12, 2024

  • CVE-2020-9392
    30Monitor

    An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.

    HighCVSS 7.3No exploitEPSS 1%

    supsystic · pricing table by supsysticMar 23, 2020

  • CVE-2021-24275
    29Monitor

    Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 18%

    supsystic · popupMay 5, 2021

  • CVE-2021-24274
    29Monitor

    Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 17%

    supsystic · ultimate mapsMay 5, 2021

  • CVE-2021-24276
    29Monitor

    Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 16%

    supsystic · contact formMay 5, 2021