Ex.Mi (Patchstack)

29 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
21İzleyin	CVE-2022-29434İstismar yok	WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerabilityspiffyplugins · spiffy calendar · CWE-639 Erişim denetimi (IDOR)	Orta5,4	—	%0,7	20 May 2022
19İzleyin	CVE-2022-29432İstismar yok	WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiestms-outsource · wpdatatables · CWE-79 XSS	Orta4,8	—	%0,5	20 May 2022
39İzleyin	CVE-2022-29423İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerabilityedmonsoft · countdown builder · CWE-264 Kimlik doğrulamasız	Kritik9,8	—	%1,1	6 May 2022
19İzleyin	CVE-2022-29422İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesedmonsoft · countdown builder · CWE-79 XSS	Orta4,8	—	%0,6	6 May 2022
24İzleyin	CVE-2022-29421İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerabilityedmonsoft · countdown builder · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	6 May 2022
21İzleyin	CVE-2022-29414İstismar yok	WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitieswpkube · subscribe to comments reloaded · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,4	29 Nis 2022
24İzleyin	CVE-2022-29413İstismar yok	WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerabilityhermit project · hermit · CWE-79 Kimlik doğrulamasız XSS CSRF	Orta6,1	—	%0,4	28 Nis 2022
21İzleyin	CVE-2022-29412İstismar yok	WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitieshermit project · hermit · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,4	28 Nis 2022
21İzleyin	CVE-2022-27854İstismar yok	WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitypsychological tests \& quizzes project · psychological tests \& quizzes · CWE-79 XSS	Orta5,4	—	%0,6	26 Nis 2022
19İzleyin	CVE-2022-29418İstismar yok	WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitynight mode project · night mode · CWE-79 XSS	Orta4,8	—	%0,5	25 Nis 2022
32İzleyin	CVE-2022-23976İstismar yok	WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)accesspressthemes · access demo importer · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,1	—	%0,5	18 Nis 2022
26İzleyin	CVE-2022-23975İstismar yok	WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activationaccesspressthemes · access demo importer · CWE-352 Kimlik doğrulamasız CSRF	Orta6,5	—	%0,5	18 Nis 2022
17İzleyin	CVE-2022-27850İstismar yok	WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilityplugin-planet · simple ajax chat · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	15 Nis 2022
31İzleyin	CVE-2022-27849Kavram kanıtı	WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerabilityplugin-planet · simple ajax chat · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%4,6	15 Nis 2022
17İzleyin	CVE-2022-27847İstismar yok	WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Importyooslider · yoo slider · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	13 Nis 2022
17İzleyin	CVE-2022-27846İstismar yok	WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Slider Creation / Modificationyooslider · yoo slider · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	13 Nis 2022
17İzleyin	CVE-2022-25615İstismar yok	WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletionstylemixthemes · eroom - zoom meetings \& webinar · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	11 Nis 2022
17İzleyin	CVE-2022-25614İstismar yok	WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerabilitystylemixthemes · eroom - zoom meetings \& webinar · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	11 Nis 2022
21İzleyin	CVE-2022-25613İstismar yok	WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilityfoliovision · fv flowplayer video player · CWE-79 XSS	Orta5,4	—	%0,6	4 Nis 2022
21İzleyin	CVE-2022-25612İstismar yok	WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiespresstigers · simple event planner · CWE-79 XSS	Orta5,4	—	%0,6	25 Mar 2022
21İzleyin	CVE-2022-25606İstismar yok	WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitieswp-downloadmanager project · wp-downloadmanager · CWE-79 XSS	Orta5,4	—	%0,6	25 Mar 2022
21İzleyin	CVE-2022-25605İstismar yok	WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitieswp-downloadmanager project · wp-downloadmanager · CWE-79 XSS	Orta5,4	—	%0,6	18 Mar 2022
24İzleyin	CVE-2022-25601İstismar yok	WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerabilityplugin-planet · contact form x · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,0	11 Mar 2022
35İzleyin	CVE-2022-25600İstismar yok	WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerabilityweplugins · wp maps · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,6	11 Mar 2022
27İzleyin	CVE-2021-31567İstismar yok	WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerabilitywpchill · download monitor · CWE-200 Bilgi sızıntısı	Orta6,8	—	%1,4	28 Oca 2022

CVE-2022-29434
21İzleyin
WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- Erişim denetimi (IDOR)
spiffyplugins · spiffy calendar20 May 2022
CVE-2022-29432
19İzleyin
WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
tms-outsource · wpdatatables20 May 2022
CVE-2022-29423
39İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
edmonsoft · countdown builder6 May 2022
CVE-2022-29422
19İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
edmonsoft · countdown builder6 May 2022
CVE-2022-29421
24İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
edmonsoft · countdown builder6 May 2022
CVE-2022-29414
21İzleyin
WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wpkube · subscribe to comments reloaded29 Nis 2022
CVE-2022-29413
24İzleyin
WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
- CSRF
hermit project · hermit28 Nis 2022
CVE-2022-29412
21İzleyin
WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
hermit project · hermit28 Nis 2022
CVE-2022-27854
21İzleyin
WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
psychological tests \& quizzes project · psychological tests \& quizzes26 Nis 2022
CVE-2022-29418
19İzleyin
WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
night mode project · night mode25 Nis 2022
CVE-2022-23976
32İzleyin
WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
accesspressthemes · access demo importer18 Nis 2022
CVE-2022-23975
26İzleyin
WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
accesspressthemes · access demo importer18 Nis 2022
CVE-2022-27850
17İzleyin
WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin-planet · simple ajax chat15 Nis 2022
CVE-2022-27849
31İzleyin
WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability
YüksekCVSS 7,5Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- Bilgi sızıntısı
plugin-planet · simple ajax chat15 Nis 2022
CVE-2022-27847
17İzleyin
WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
yooslider · yoo slider13 Nis 2022
CVE-2022-27846
17İzleyin
WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Slider Creation / Modification
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
yooslider · yoo slider13 Nis 2022
CVE-2022-25615
17İzleyin
WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
stylemixthemes · eroom - zoom meetings \& webinar11 Nis 2022
CVE-2022-25614
17İzleyin
WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
stylemixthemes · eroom - zoom meetings \& webinar11 Nis 2022
CVE-2022-25613
21İzleyin
WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
foliovision · fv flowplayer video player4 Nis 2022
CVE-2022-25612
21İzleyin
WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
presstigers · simple event planner25 Mar 2022
CVE-2022-25606
21İzleyin
WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
wp-downloadmanager project · wp-downloadmanager25 Mar 2022
CVE-2022-25605
21İzleyin
WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
wp-downloadmanager project · wp-downloadmanager18 Mar 2022
CVE-2022-25601
24İzleyin
WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
plugin-planet · contact form x11 Mar 2022
CVE-2022-25600
35İzleyin
WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
weplugins · wp maps11 Mar 2022
CVE-2021-31567
27İzleyin
WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability
OrtaCVSS 6,8İstismar yokEPSS %1
- Bilgi sızıntısı
wpchill · download monitor28 Oca 2022