wickedplugins records

21 published records for vendor wickedplugins.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-24919No exploit	Wicked Folders < 2.18.10 - Subscriber+ SQL Injectionwickedplugins · wicked folders · CWE-89 SQL injection	High8.8	—	1.5%	Feb 1, 2022
17Monitor	CVE-2023-0719No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_orderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0712No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_objectwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0718No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0716No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0713No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0717No exploit	Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0684No exploit	Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folderswickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0720No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_orderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0715No exploit	Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folderwickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0711No exploit	Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_statewickedplugins · wicked folders · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.6%	Feb 7, 2023
17Monitor	CVE-2023-0730No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_orderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0723No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_objectwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0727No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0728No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0685No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folderswickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0722No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_statewickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0724No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0725No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0726No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 7, 2023
17Monitor	CVE-2023-0729No exploit	Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_orderwickedplugins · wicked folders · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Jun 9, 2023

CVE-2021-24919
35Monitor
Wicked Folders < 2.18.10 - Subscriber+ SQL Injection
HighCVSS 8.8No exploitEPSS 2%
- SQL injection
wickedplugins · wicked foldersFeb 1, 2022
CVE-2023-0719
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0712
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0718
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0716
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0713
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0717
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0684
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0720
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0715
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0711
17Monitor
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0730
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0723
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0727
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0728
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0685
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0722
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0724
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0725
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0726
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersFeb 7, 2023
CVE-2023-0729
17Monitor
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
wickedplugins · wicked foldersJun 9, 2023