CatFather (Patchstack Alliance)

22 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-47424İstismar yok	WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)reputeinfosystems · armember · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	19 Kas 2024
17İzleyin	CVE-2024-37204İstismar yok	WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerabilitywp-property-hive · propertyhive · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	1 Kas 2024
26İzleyin	CVE-2024-37224İstismar yok	WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerabilitysmartypantsplugins · sp project \& document manager · CWE-22 Yol geçişi	Orta6,5	—	%0,6	9 Tem 2024
35İzleyin	CVE-2024-31294İstismar yok	WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerabilityandroidbubble · wp sort order · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	9 Haz 2024
21İzleyin	CVE-2024-35701İstismar yok	WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerabilitywp-property-hive · propertyhive · CWE-79 XSS	Orta5,4	—	%0,3	8 Haz 2024
23İzleyin	CVE-2024-34574İstismar yok	WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerabilitywpsoul · table maker · CWE-79 XSS	Orta5,9	—	%0,3	8 May 2024
30İzleyin	CVE-2024-34388İstismar yok	WordPress GDPR Compliance plugin <= 1.2.5 - Sensitive Data Exposure vulnerabilityscribit · gdpr compliance · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,6	6 May 2024
21İzleyin	CVE-2024-33641İstismar yok	WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerabilityteam yoast · custom field finder · CWE-502 Kimlik doğrulamasız Deserializasyon	Orta5,4	—	%0,3	29 Nis 2024
30İzleyin	CVE-2024-32551İstismar yok	WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerabilitysmartypants · sp project & document manager · CWE-89 SQL enjeksiyonu	Yüksek7,6	—	%0,5	18 Nis 2024
28İzleyin	CVE-2024-32574İstismar yok	WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerabilityashish ajani · wp simple html sitemap · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,4	18 Nis 2024
26İzleyin	CVE-2024-32569İstismar yok	WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerabilitymetaphor creations · ditty · CWE-79 XSS	Orta6,5	—	%0,3	18 Nis 2024
26İzleyin	CVE-2024-32590İstismar yok	WordPress Kattene plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilitywebfood · kattene · CWE-79 XSS	Orta6,5	—	%0,3	18 Nis 2024
23İzleyin	CVE-2024-32548İstismar yok	WordPress What's New Generator plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityhideki tanaka · what's new generator · CWE-79 XSS	Orta5,9	—	%0,3	17 Nis 2024
35İzleyin	CVE-2024-27985İstismar yok	WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerabilitywp-property-hive · propertyhive · CWE-502 Deserializasyon	Yüksek8,8	—	%0,4	10 Nis 2024
26İzleyin	CVE-2024-31121İstismar yok	WordPress HeartThis plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerabilitywp site care · heartthis · CWE-79 XSS	Orta6,5	—	%0,3	31 Mar 2024
26İzleyin	CVE-2024-30438İstismar yok	WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitybplugins · print page block · CWE-79 XSS	Orta6,5	—	%0,4	29 Mar 2024
10İzleyin	CVE-2024-30507İstismar yok	WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerabilitymolongui · molongui · CWE-639 Erişim denetimi (IDOR)	Düşük2,7	—	%0,4	29 Mar 2024
26İzleyin	CVE-2024-29764İstismar yok	WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerabilitymolongui · molongui · CWE-79 XSS	Orta6,5	—	%0,4	27 Mar 2024
26İzleyin	CVE-2024-29775İstismar yok	WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityvinoth06. · frontend dashboard · CWE-79 XSS	Orta6,5	—	%0,4	27 Mar 2024
26İzleyin	CVE-2024-29772İstismar yok	WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerabilitystormhill media · mybooktable bookstore · CWE-79 XSS	Orta6,5	—	%0,4	27 Mar 2024
26İzleyin	CVE-2024-29111İstismar yok	WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilitywebvitaly · sitekit · CWE-79 XSS	Orta6,5	—	%0,3	19 Mar 2024
18İzleyin	CVE-2024-27953İstismar yok	WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Controlcoolplugins · cryptocurrency widgets · CWE-862 Erişim denetimi (IDOR)	Orta4,7	—	%0,4	13 Mar 2024

CVE-2022-47424
35İzleyin
WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
reputeinfosystems · armember19 Kas 2024
CVE-2024-37204
17İzleyin
WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wp-property-hive · propertyhive1 Kas 2024
CVE-2024-37224
26İzleyin
WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1
- Yol geçişi
smartypantsplugins · sp project \& document manager9 Tem 2024
CVE-2024-31294
35İzleyin
WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
androidbubble · wp sort order9 Haz 2024
CVE-2024-35701
21İzleyin
WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wp-property-hive · propertyhive8 Haz 2024
CVE-2024-34574
23İzleyin
WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
wpsoul · table maker8 May 2024
CVE-2024-34388
30İzleyin
WordPress GDPR Compliance plugin <= 1.2.5 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
scribit · gdpr compliance6 May 2024
CVE-2024-33641
21İzleyin
WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
team yoast · custom field finder29 Nis 2024
CVE-2024-32551
30İzleyin
WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0
- SQL enjeksiyonu
smartypants · sp project & document manager18 Nis 2024
CVE-2024-32574
28İzleyin
WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
ashish ajani · wp simple html sitemap18 Nis 2024
CVE-2024-32569
26İzleyin
WordPress Ditty plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
metaphor creations · ditty18 Nis 2024
CVE-2024-32590
26İzleyin
WordPress Kattene plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
webfood · kattene18 Nis 2024
CVE-2024-32548
23İzleyin
WordPress What's New Generator plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
hideki tanaka · what's new generator17 Nis 2024
CVE-2024-27985
35İzleyin
WordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Deserializasyon
wp-property-hive · propertyhive10 Nis 2024
CVE-2024-31121
26İzleyin
WordPress HeartThis plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
wp site care · heartthis31 Mar 2024
CVE-2024-30438
26İzleyin
WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
bplugins · print page block29 Mar 2024
CVE-2024-30507
10İzleyin
WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability
DüşükCVSS 2,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
molongui · molongui29 Mar 2024
CVE-2024-29764
26İzleyin
WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
molongui · molongui27 Mar 2024
CVE-2024-29775
26İzleyin
WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
vinoth06. · frontend dashboard27 Mar 2024
CVE-2024-29772
26İzleyin
WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
stormhill media · mybooktable bookstore27 Mar 2024
CVE-2024-29111
26İzleyin
WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
webvitaly · sitekit19 Mar 2024
CVE-2024-27953
18İzleyin
WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control
OrtaCVSS 4,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
coolplugins · cryptocurrency widgets13 Mar 2024