abrahack
25 записей с упоминанием · 7 за 12 месяцев · 0 в CISA KEV
Имена — свободный текст из записей CNA; один человек может встречаться в разных написаниях. Напишите нам для исправления.
Узнайте, когда это имя появится в новой CVE
Если это вы — самый простой способ следить за своими записями: сообщим в ежедневной сводке, когда выйдет новая.
Записи с упоминанием
Исследователи| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
21Наблюдать | CVE-2025-12714Эксплойта нет | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modificationrankmath · rank math seo – ai seo tools to dominate seo rankings · CWE-862 | Средняя5,3 | — | 0,4 % | 29 мая 2026 г. |
21Наблюдать | CVE-2025-10734Эксплойта нет | ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exporeviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema · CWE-922 | Средняя5,3 | — | 0,2 % | 23 мар. 2026 г. |
21Наблюдать | CVE-2025-10731Эксплойта нет | ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exporeviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema · CWE-285 | Средняя5,3 | — | 0,3 % | 23 мар. 2026 г. |
29Наблюдать | CVE-2025-10679Эксплойта нет | ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Executreviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema · CWE-94 | Высокая7,3 | — | 0,4 % | 23 мар. 2026 г. |
26Наблюдать | CVE-2025-10736Эксплойта нет | ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticatedreviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema · CWE-285 | Средняя6,5 | — | 0,1 % | 23 мар. 2026 г. |
25Наблюдать | CVE-2025-11003Эксплойта нет | UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingadmintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages · CWE-862 | Средняя6,4 | — | 0,2 % | 21 нояб. 2025 г. |
26Наблюдать | CVE-2025-10938Эксплойта нет | UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposureadmintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages · CWE-862 | Средняя6,5 | — | 0,2 % | 21 нояб. 2025 г. |
26Наблюдать | CVE-2024-13806Эксплойта нет | Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Executionwpkube · authors list · CWE-94 | Средняя6,5 | — | 0,3 % | 1 мар. 2025 г. |
21Наблюдать | CVE-2025-1361Proof of concept | IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Functionip2location · country blocker · CWE-285 | Средняя5,3 | — | 1,3 % | 22 февр. 2025 г. |
17Наблюдать | CVE-2024-13439Эксплойта нет | Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Updatetechlabpro · team · CWE-862 | Средняя4,3 | — | 0,3 % | 15 февр. 2025 г. |
17Наблюдать | CVE-2024-13415Эксплойта нет | Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Updatetechlabpro1 · food menu – restaurant menu & online ordering for woocommerce · CWE-862 | Средняя4,3 | — | 0,2 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-10636Эксплойта нет | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via contentays pro plugins · quiz maker developer · CWE-79 | Средняя6,1 | — | 0,3 % | 26 янв. 2025 г. |
29Наблюдать | CVE-2024-10633Эксплойта нет | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via contentays pro plugins · quiz maker developer · CWE-95 | Высокая7,3 | — | 0,5 % | 26 янв. 2025 г. |
30Наблюдать | CVE-2024-10628Эксплойта нет | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via idays-pro · quiz maker · CWE-89 | Высокая7,5 | — | 0,8 % | 26 янв. 2025 г. |
28Наблюдать | CVE-2024-10574Эксплойта нет | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Crossays pro plugins · quiz maker developer · CWE-862 | Высокая7,2 | — | 0,4 % | 26 янв. 2025 г. |
29Наблюдать | CVE-2024-13499Эксплойта нет | GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Functiongamipress · gamipress · CWE-94 | Высокая7,3 | — | 0,5 % | 22 янв. 2025 г. |
31Наблюдать | CVE-2024-13496Proof of concept | GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parametergamipress · gamipress · CWE-89 | Высокая7,5 | — | 2,2 % | 22 янв. 2025 г. |
30Наблюдать | CVE-2024-9939Эксплойта нет | WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.phpiptanus · wordpress file upload · CWE-22 | Высокая7,5 | — | 1,0 % | 8 янв. 2025 г. |
39Наблюдать | CVE-2024-11635Proof of concept | WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Executioniptanus · wordpress file upload · CWE-94 | Критическая9,8 | — | 1,4 % | 8 янв. 2025 г. |
40В плане | CVE-2024-11613Proof of concept | WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletioniptanus · wordpress file upload · CWE-94 | Критическая9,8 | — | 4,4 % | 8 янв. 2025 г. |
21Наблюдать | CVE-2024-11868Proof of concept | LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST APIthimpress · learnpress · CWE-284 | Средняя5,3 | — | 1,1 % | 10 дек. 2024 г. |
30Наблюдать | CVE-2024-10567Эксплойта нет | TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Accesstemplateinvaders · ti woocommerce wishlist · CWE-862 | Высокая7,5 | — | 0,3 % | 4 дек. 2024 г. |
40В плане | CVE-2024-10571Proof of concept | Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via sourceays-pro · chartify · CWE-98 | Критическая9,8 | — | 4,8 % | 14 нояб. 2024 г. |
60На этой неделе | CVE-2024-8529Готовый эксплойт | LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'thimpress · learnpress · CWE-89 | Высокая7,5 | — | 12,0 % | 12 сент. 2024 г. |
60На этой неделе | CVE-2024-8522Готовый эксплойт | LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'thimpress · learnpress · CWE-89 | Высокая7,5 | — | 62,8 % | 12 сент. 2024 г. |
- CVE-2025-1271421Наблюдать
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification
СредняяCVSS 5,3Эксплойта нетEPSS 0 %rankmath · rank math seo – ai seo tools to dominate seo rankings29 мая 2026 г.
- CVE-2025-1073421Наблюдать
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Expo
СредняяCVSS 5,3Эксплойта нетEPSS 0 %reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema23 мар. 2026 г.
- CVE-2025-1073121Наблюдать
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Expo
СредняяCVSS 5,3Эксплойта нетEPSS 0 %reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema23 мар. 2026 г.
- CVE-2025-1067929Наблюдать
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execut
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema23 мар. 2026 г.
- CVE-2025-1073626Наблюдать
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated
СредняяCVSS 6,5Эксплойта нетEPSS 0 %reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schema23 мар. 2026 г.
- CVE-2025-1100325Наблюдать
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
СредняяCVSS 6,4Эксплойта нетEPSS 0 %admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages21 нояб. 2025 г.
- CVE-2025-1093826Наблюдать
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
СредняяCVSS 6,5Эксплойта нетEPSS 0 %admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pages21 нояб. 2025 г.
- CVE-2024-1380626Наблюдать
Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution
СредняяCVSS 6,5Эксплойта нетEPSS 0 %wpkube · authors list1 мар. 2025 г.
- CVE-2025-136121Наблюдать
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
СредняяCVSS 5,3Proof of conceptEPSS 1 %ip2location · country blocker22 февр. 2025 г.
- CVE-2024-1343917Наблюдать
Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update
СредняяCVSS 4,3Эксплойта нетEPSS 0 %techlabpro · team15 февр. 2025 г.
- CVE-2024-1341517Наблюдать
Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
СредняяCVSS 4,3Эксплойта нетEPSS 0 %techlabpro1 · food menu – restaurant menu & online ordering for woocommerce31 янв. 2025 г.
- CVE-2024-1063624Наблюдать
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content
СредняяCVSS 6,1Эксплойта нетEPSS 0 %ays pro plugins · quiz maker developer26 янв. 2025 г.
- CVE-2024-1063329Наблюдать
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %ays pro plugins · quiz maker developer26 янв. 2025 г.
- CVE-2024-1062830Наблюдать
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %ays-pro · quiz maker26 янв. 2025 г.
- CVE-2024-1057428Наблюдать
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross
ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %ays pro plugins · quiz maker developer26 янв. 2025 г.
- CVE-2024-1349929Наблюдать
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %gamipress · gamipress22 янв. 2025 г.
- CVE-2024-1349631Наблюдать
GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %gamipress · gamipress22 янв. 2025 г.
- CVE-2024-993930Наблюдать
WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %iptanus · wordpress file upload8 янв. 2025 г.
- CVE-2024-1163539Наблюдать
WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution
КритическаяCVSS 9,8Proof of conceptEPSS 1 %iptanus · wordpress file upload8 янв. 2025 г.
- CVE-2024-1161340В плане
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
КритическаяCVSS 9,8Proof of conceptEPSS 4 %iptanus · wordpress file upload8 янв. 2025 г.
- CVE-2024-1186821Наблюдать
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
СредняяCVSS 5,3Proof of conceptEPSS 1 %thimpress · learnpress10 дек. 2024 г.
- CVE-2024-1056730Наблюдать
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %templateinvaders · ti woocommerce wishlist4 дек. 2024 г.
- CVE-2024-1057140В плане
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
КритическаяCVSS 9,8Proof of conceptEPSS 4 %ays-pro · chartify14 нояб. 2024 г.
- CVE-2024-852960На этой неделе
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'
ВысокаяCVSS 7,5Готовый эксплойтEPSS 12 %thimpress · learnpress12 сент. 2024 г.
- CVE-2024-852260На этой неделе
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'
ВысокаяCVSS 7,5Готовый эксплойтEPSS 62 %thimpress · learnpress12 сент. 2024 г.