emad (Patchstack Alliance)
56 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
14İzleyin | CVE-2024-39639İstismar yok | WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerabilityiptanus · wordpress file upload · CWE-352 | Düşük3,5 | — | %0,3 | 1 Kas 2024 |
21İzleyin | CVE-2024-23504İstismar yok | WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerabilitywpmanageninja · ninja tables · CWE-862 | Orta5,3 | — | %0,3 | 14 Haz 2024 |
35İzleyin | CVE-2023-51524İstismar yok | WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerabilityweformspro · weforms · CWE-862 | Yüksek8,8 | — | %0,3 | 12 Haz 2024 |
25İzleyin | CVE-2023-52117İstismar yok | WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerabilitymetagauss · profilegrid · CWE-862 | Orta6,3 | — | %0,3 | 12 Haz 2024 |
17İzleyin | CVE-2024-32144İstismar yok | WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerabilitywelcart · welcart e-commerce · CWE-862 | Orta4,3 | — | %0,3 | 11 Haz 2024 |
17İzleyin | CVE-2024-23503İstismar yok | WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerabilitywpmanageninja · ninja tables · CWE-862 | Orta4,3 | — | %0,3 | 11 Haz 2024 |
35İzleyin | CVE-2024-22296İstismar yok | WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerabilitycode4recovery · 12 step meeting list · CWE-862 | Yüksek8,8 | — | %0,3 | 10 Haz 2024 |
35İzleyin | CVE-2024-31252İstismar yok | WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerabilitydfactory · responsive lightbox \& gallery · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
35İzleyin | CVE-2024-31248İstismar yok | WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerabilityplugins360 · all-in-one video gallery · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
21İzleyin | CVE-2024-22151İstismar yok | WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerabilitycodection · import and export users and customers · CWE-862 | Orta5,3 | — | %0,3 | 8 Haz 2024 |
21İzleyin | CVE-2024-34798İstismar yok | WordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerabilitylukman nakib · debug log – manger tool · CWE-532 | Orta5,3 | — | %0,3 | 3 Haz 2024 |
17İzleyin | CVE-2024-33627İstismar yok | WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerabilitycusmin · absolutely glamorous custom admin · CWE-918 | Orta4,4 | — | %0,3 | 29 Nis 2024 |
23İzleyin | CVE-2024-33642İstismar yok | WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerabilityekojr · advanced post list · CWE-79 | Orta5,9 | — | %0,4 | 26 Nis 2024 |
23İzleyin | CVE-2024-32722İstismar yok | WordPress Coupon & Discount Code Reveal Button plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityCWE-79 | Orta5,9 | — | %0,3 | 24 Nis 2024 |
21İzleyin | CVE-2024-32686İstismar yok | WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerabilityinisev · backup migration · CWE-532 | Orta5,3 | — | %0,4 | 18 Nis 2024 |
21İzleyin | CVE-2024-32598İstismar yok | WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerabilityba-booking · ba book everything · CWE-79 | Orta5,4 | — | %0,3 | 18 Nis 2024 |
23İzleyin | CVE-2024-31926İstismar yok | WordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerabilitybracketspace · advanced cron manager – debug & control · CWE-79 | Orta5,9 | — | %0,4 | 11 Nis 2024 |
21İzleyin | CVE-2024-29807İstismar yok | WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerabilitydearhive · dearflip · CWE-79 | Orta5,4 | — | %0,3 | 27 Mar 2024 |
28İzleyin | CVE-2024-22149İstismar yok | WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityoliver seidel, bastian germann · cformsii · CWE-79 | Yüksek7,1 | — | %0,4 | 27 Mar 2024 |
35İzleyin | CVE-2024-24701İstismar yok | WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)tiny · setka workflow · CWE-352 | Yüksek8,8 | — | %0,3 | 28 Şub 2024 |
35İzleyin | CVE-2024-24702İstismar yok | WordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Cross Site Request Forgery (CSRF)sivel · page restrict · CWE-352 | Yüksek8,8 | — | %0,2 | 28 Şub 2024 |
19İzleyin | CVE-2023-51370İstismar yok | WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)ninjateam · wp chat app · CWE-79 | Orta4,8 | — | %0,3 | 12 Şub 2024 |
19İzleyin | CVE-2023-51685İstismar yok | WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)ljapps · wp review slider · CWE-79 | Orta4,8 | — | %0,3 | 1 Şub 2024 |
19İzleyin | CVE-2023-52203İstismar yok | WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)cformsii project · cformsii · CWE-79 | Orta4,8 | — | %0,3 | 8 Oca 2024 |
35İzleyin | CVE-2023-51378İstismar yok | WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)eaglevisionit · rise blocks · CWE-352 | Yüksek8,8 | — | %0,2 | 29 Ara 2023 |
- CVE-2024-3963914İzleyin
WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability
DüşükCVSS 3,5İstismar yokEPSS %0iptanus · wordpress file upload1 Kas 2024
- CVE-2024-2350421İzleyin
WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpmanageninja · ninja tables14 Haz 2024
- CVE-2023-5152435İzleyin
WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0weformspro · weforms12 Haz 2024
- CVE-2023-5211725İzleyin
WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0metagauss · profilegrid12 Haz 2024
- CVE-2024-3214417İzleyin
WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0welcart · welcart e-commerce11 Haz 2024
- CVE-2024-2350317İzleyin
WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wpmanageninja · ninja tables11 Haz 2024
- CVE-2024-2229635İzleyin
WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0code4recovery · 12 step meeting list10 Haz 2024
- CVE-2024-3125235İzleyin
WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0dfactory · responsive lightbox \& gallery9 Haz 2024
- CVE-2024-3124835İzleyin
WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0plugins360 · all-in-one video gallery9 Haz 2024
- CVE-2024-2215121İzleyin
WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0codection · import and export users and customers8 Haz 2024
- CVE-2024-3479821İzleyin
WordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0lukman nakib · debug log – manger tool3 Haz 2024
- CVE-2024-3362717İzleyin
WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 4,4İstismar yokEPSS %0cusmin · absolutely glamorous custom admin29 Nis 2024
- CVE-2024-3364223İzleyin
WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0ekojr · advanced post list26 Nis 2024
- CVE-2024-3272223İzleyin
WordPress Coupon & Discount Code Reveal Button plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %024 Nis 2024
- CVE-2024-3268621İzleyin
WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0inisev · backup migration18 Nis 2024
- CVE-2024-3259821İzleyin
WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0ba-booking · ba book everything18 Nis 2024
- CVE-2024-3192623İzleyin
WordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0bracketspace · advanced cron manager – debug & control11 Nis 2024
- CVE-2024-2980721İzleyin
WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0dearhive · dearflip27 Mar 2024
- CVE-2024-2214928İzleyin
WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0oliver seidel, bastian germann · cformsii27 Mar 2024
- CVE-2024-2470135İzleyin
WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0tiny · setka workflow28 Şub 2024
- CVE-2024-2470235İzleyin
WordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0sivel · page restrict28 Şub 2024
- CVE-2023-5137019İzleyin
WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0ninjateam · wp chat app12 Şub 2024
- CVE-2023-5168519İzleyin
WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0ljapps · wp review slider1 Şub 2024
- CVE-2023-5220319İzleyin
WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0cformsii project · cformsii8 Oca 2024
- CVE-2023-5137835İzleyin
WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0eaglevisionit · rise blocks29 Ara 2023