BEE-K (Patchstack)
13 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
19İzleyin | CVE-2022-30536İstismar yok | WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitywp maintenance project · wp maintenance · CWE-79 | Orta4,8 | — | %0,7 | 21 Tem 2022 |
17İzleyin | CVE-2022-32289İstismar yok | WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Changesygnoos · popup builder · CWE-352 | Orta4,3 | — | %0,3 | 21 Tem 2022 |
17İzleyin | CVE-2022-29441İstismar yok | WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerabilityprivate messages project · private messages · CWE-352 | Orta4,3 | — | %0,4 | 15 Haz 2022 |
19İzleyin | CVE-2022-29438İstismar yok | WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitynextcode · image slider by nextcode · CWE-79 | Orta4,8 | — | %0,5 | 15 Haz 2022 |
35İzleyin | CVE-2022-29437İstismar yok | WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesnextcode · image slider by nextcode · CWE-352 | Yüksek8,8 | — | %0,4 | 15 Haz 2022 |
24İzleyin | CVE-2022-29408İstismar yok | WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerabilityvsourz · advanced cf7 db · CWE-79 | Orta6,1 | — | %0,7 | 25 May 2022 |
21İzleyin | CVE-2022-29431İstismar yok | Remove CPT base <= 5.8 - CSRF leads to CPT base deletionkubiq · cpt base · CWE-352 | Orta5,4 | — | %0,4 | 20 May 2022 |
24İzleyin | CVE-2022-29430İstismar yok | WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerabilitypng to jpg project · png to jpg · CWE-79 | Orta6,1 | — | %0,4 | 20 May 2022 |
28İzleyin | CVE-2022-29446İstismar yok | WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerabilitywow-company · counter box · CWE-552 | Yüksek7,2 | — | %1,0 | 19 May 2022 |
24İzleyin | CVE-2022-25617İstismar yok | WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerabilitycodesnippets · code snippets · CWE-79 | Orta6,1 | — | %0,8 | 18 May 2022 |
24İzleyin | CVE-2022-29436İstismar yok | WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)code snippets extended project · code snippets extended · CWE-79 | Orta6,1 | — | %0,4 | 17 May 2022 |
21İzleyin | CVE-2022-29435İstismar yok | WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerabilitycode snippets extended project · code snippets extended · CWE-352 | Orta5,4 | — | %0,4 | 17 May 2022 |
35İzleyin | CVE-2022-29451İstismar yok | WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerabilityrarathemes · rara one click demo import · CWE-352 | Yüksek8,8 | — | %0,6 | 29 Nis 2022 |
- CVE-2022-3053619İzleyin
WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1wp maintenance project · wp maintenance21 Tem 2022
- CVE-2022-3228917İzleyin
WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change
OrtaCVSS 4,3İstismar yokEPSS %0sygnoos · popup builder21 Tem 2022
- CVE-2022-2944117İzleyin
WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0private messages project · private messages15 Haz 2022
- CVE-2022-2943819İzleyin
WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1nextcode · image slider by nextcode15 Haz 2022
- CVE-2022-2943735İzleyin
WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0nextcode · image slider by nextcode15 Haz 2022
- CVE-2022-2940824İzleyin
WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1vsourz · advanced cf7 db25 May 2022
- CVE-2022-2943121İzleyin
Remove CPT base <= 5.8 - CSRF leads to CPT base deletion
OrtaCVSS 5,4İstismar yokEPSS %0kubiq · cpt base20 May 2022
- CVE-2022-2943024İzleyin
WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0png to jpg project · png to jpg20 May 2022
- CVE-2022-2944628İzleyin
WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1wow-company · counter box19 May 2022
- CVE-2022-2561724İzleyin
WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1codesnippets · code snippets18 May 2022
- CVE-2022-2943624İzleyin
WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0code snippets extended project · code snippets extended17 May 2022
- CVE-2022-2943521İzleyin
WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0code snippets extended project · code snippets extended17 May 2022
- CVE-2022-2945135İzleyin
WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1rarathemes · rara one click demo import29 Nis 2022