wbolt records
5 published records for vendor wbolt.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 20%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-6318No exploit | IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'wbolt · imgspider · CWE-434 | High8.8 | — | 0.9% | Jul 4, 2024 |
35Monitor | CVE-2024-6319No exploit | IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'wbolt · imgspider · CWE-434 | High8.8 | — | 0.9% | Jul 4, 2024 |
35Monitor | CVE-2023-26531No exploit | WordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)wbolt · all-in-one search automatic push management · CWE-352 | High8.8 | — | 0.3% | Nov 12, 2023 |
24Monitor | CVE-2021-24976No exploit | Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scriptingwbolt · smart seo tool · CWE-79 | Medium6.1 | — | 0.9% | Jan 24, 2022 |
21Monitor | CVE-2021-24618No exploit | Donate With QRCode < 1.4.5 - Stored Cross-Site Scriptingwbolt · donate with qrcode · CWE-79 | Medium5.4 | — | 0.4% | Sep 20, 2021 |
- CVE-2024-631835Monitor
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
HighCVSS 8.8No exploitEPSS 1%wbolt · imgspiderJul 4, 2024
- CVE-2024-631935Monitor
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'
HighCVSS 8.8No exploitEPSS 1%wbolt · imgspiderJul 4, 2024
- CVE-2023-2653135Monitor
WordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%wbolt · all-in-one search automatic push managementNov 12, 2023
- CVE-2021-2497624Monitor
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%wbolt · smart seo toolJan 24, 2022
- CVE-2021-2461821Monitor
Donate With QRCode < 1.4.5 - Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%wbolt · donate with qrcodeSep 20, 2021