Skip to content
Noroxi

vasyltech records

9 published records for vendor vasyltech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
55.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2020-35935
    35Monitor

    The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST par

    HighCVSS 8.8No exploitEPSS 1%

    vasyltech · advanced access managerDec 31, 2020

  • CVE-2019-25213
    31Monitor

    Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read

    HighCVSS 7.5Proof of conceptEPSS 3%

    vasyltech · advanced access managerOct 16, 2024

  • CVE-2014-6059
    29Monitor

    WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability

    HighCVSS 7.2No exploitEPSS 3%

    vasyltech · advanced access managerJan 13, 2020

  • CVE-2024-29127
    24Monitor

    WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    vasyltech · advanced access managerMar 19, 2024

  • CVE-2023-51674
    21Monitor

    WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    vasyltech · advanced access managerFeb 1, 2024

  • CVE-2023-50881
    21Monitor

    WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    vasyltech · advanced access managerDec 29, 2023

  • CVE-2023-51675
    21Monitor

    WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

    MediumCVSS 5.4No exploitEPSS 0%

    vasyltech · advanced access managerDec 29, 2023

  • CVE-2021-24830
    19Monitor

    Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    vasyltech · advanced access managerNov 23, 2021

  • CVE-2020-35934
    17Monitor

    The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via th

    MediumCVSS 4.3No exploitEPSS 1%

    vasyltech · advanced access managerDec 31, 2020