Elliot (Patchstack Alliance)
26 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2023-47689İstismar yok | WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerabilitytoast plugins · animator · CWE-862 | Orta6,5 | — | %0,4 | 2 Oca 2025 |
17İzleyin | CVE-2023-47647İstismar yok | WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerabilitylearningtimes · badgeos · CWE-862 | Orta4,3 | — | %0,4 | 2 Oca 2025 |
35İzleyin | CVE-2023-41870İstismar yok | WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerabilitythemeum · wp crowdfunding · CWE-862 | Yüksek8,8 | — | %0,8 | 13 Ara 2024 |
21İzleyin | CVE-2023-41849İstismar yok | WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerabilitywp happy coders · posts like dislike · CWE-862 | Orta5,3 | — | %0,5 | 13 Ara 2024 |
21İzleyin | CVE-2023-49154İstismar yok | WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerabilitywow-company · button generator – easily button builder · CWE-862 | Orta5,3 | — | %0,6 | 9 Ara 2024 |
21İzleyin | CVE-2023-29239İstismar yok | WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerabilityluckywp · luckywp scripts control · CWE-862 | Orta5,4 | — | %0,4 | 9 Ara 2024 |
25İzleyin | CVE-2024-24704İstismar yok | WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerabilityaddonmaster · load more anything · CWE-862 | Orta6,3 | — | %0,3 | 11 Haz 2024 |
26İzleyin | CVE-2024-2906İstismar yok | WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerabilitysoftlab · radio player · CWE-862 | Orta6,5 | — | %0,5 | 26 Mar 2024 |
35İzleyin | CVE-2023-51696İstismar yok | WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)cleantalk · anti-spam · CWE-352 | Yüksek8,8 | — | %0,2 | 29 Şub 2024 |
35İzleyin | CVE-2024-22136İstismar yok | WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)droitthemes · droit elementor addons · CWE-352 | Yüksek8,8 | — | %0,2 | 31 Oca 2024 |
32İzleyin | CVE-2023-36520İstismar yok | WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)zackgrossbart · editorial calendar · CWE-639 | Yüksek8,1 | — | %0,4 | 20 Ara 2023 |
35İzleyin | CVE-2023-49155İstismar yok | WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)wow-company · button generator · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Ara 2023 |
35İzleyin | CVE-2023-48768İstismar yok | WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)codeastrology · quantity plus minus button for woocommerce · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Ara 2023 |
35İzleyin | CVE-2023-47531İstismar yok | WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)droitthemes · droit dark mode · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2023 |
35İzleyin | CVE-2023-29425İstismar yok | WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)plainware · shiftcontroller · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-34024İstismar yok | WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)guillemantdavid · full auto tags manager · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-46204İstismar yok | WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)mullerdigital · duplicate theme · CWE-352 | Yüksek8,8 | — | %0,3 | 25 Eki 2023 |
24İzleyin | CVE-2023-45632İstismar yok | WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)web-dorado · spidervplayer · CWE-79 | Orta6,1 | — | %0,3 | 18 Eki 2023 |
24İzleyin | CVE-2023-30781İstismar yok | WordPress Tweeple Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)themeblvd · tweeple · CWE-79 | Orta6,1 | — | %0,3 | 18 Eki 2023 |
35İzleyin | CVE-2023-29235İstismar yok | WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)fugu · maintenance switch · CWE-352 | Yüksek8,8 | — | %0,2 | 6 Eki 2023 |
35İzleyin | CVE-2023-28791İstismar yok | WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)webtechforce · simple org chart · CWE-352 | Yüksek8,8 | — | %0,3 | 6 Eki 2023 |
35İzleyin | CVE-2023-40008İstismar yok | WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)webtechforce · simple org chart · CWE-352 | Yüksek8,8 | — | %0,2 | 6 Eki 2023 |
35İzleyin | CVE-2023-32091İstismar yok | WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)poeditor · poeditor · CWE-352 | Yüksek8,8 | — | %0,2 | 3 Eki 2023 |
35İzleyin | CVE-2023-37985İstismar yok | WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)fivestarplugins · five star restaurant menu · CWE-352 | Yüksek8,8 | — | %0,3 | 17 Tem 2023 |
35İzleyin | CVE-2023-37392İstismar yok | WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)wp dummy content generator project · wp dummy content generator · CWE-352 | Yüksek8,8 | — | %0,3 | 10 Tem 2023 |
- CVE-2023-4768926İzleyin
WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0toast plugins · animator2 Oca 2025
- CVE-2023-4764717İzleyin
WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0learningtimes · badgeos2 Oca 2025
- CVE-2023-4187035İzleyin
WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1themeum · wp crowdfunding13 Ara 2024
- CVE-2023-4184921İzleyin
WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wp happy coders · posts like dislike13 Ara 2024
- CVE-2023-4915421İzleyin
WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1wow-company · button generator – easily button builder9 Ara 2024
- CVE-2023-2923921İzleyin
WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0luckywp · luckywp scripts control9 Ara 2024
- CVE-2024-2470425İzleyin
WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0addonmaster · load more anything11 Haz 2024
- CVE-2024-290626İzleyin
WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0softlab · radio player26 Mar 2024
- CVE-2023-5169635İzleyin
WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0cleantalk · anti-spam29 Şub 2024
- CVE-2024-2213635İzleyin
WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0droitthemes · droit elementor addons31 Oca 2024
- CVE-2023-3652032İzleyin
WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)
YüksekCVSS 8,1İstismar yokEPSS %0zackgrossbart · editorial calendar20 Ara 2023
- CVE-2023-4915535İzleyin
WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wow-company · button generator18 Ara 2023
- CVE-2023-4876835İzleyin
WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0codeastrology · quantity plus minus button for woocommerce18 Ara 2023
- CVE-2023-4753135İzleyin
WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0droitthemes · droit dark mode18 Kas 2023
- CVE-2023-2942535İzleyin
WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0plainware · shiftcontroller12 Kas 2023
- CVE-2023-3402435İzleyin
WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0guillemantdavid · full auto tags manager9 Kas 2023
- CVE-2023-4620435İzleyin
WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0mullerdigital · duplicate theme25 Eki 2023
- CVE-2023-4563224İzleyin
WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0web-dorado · spidervplayer18 Eki 2023
- CVE-2023-3078124İzleyin
WordPress Tweeple Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0themeblvd · tweeple18 Eki 2023
- CVE-2023-2923535İzleyin
WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0fugu · maintenance switch6 Eki 2023
- CVE-2023-2879135İzleyin
WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0webtechforce · simple org chart6 Eki 2023
- CVE-2023-4000835İzleyin
WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0webtechforce · simple org chart6 Eki 2023
- CVE-2023-3209135İzleyin
WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0poeditor · poeditor3 Eki 2023
- CVE-2023-3798535İzleyin
WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0fivestarplugins · five star restaurant menu17 Tem 2023
- CVE-2023-3739235İzleyin
WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wp dummy content generator project · wp dummy content generator10 Tem 2023