FearZzZz (Patchstack Alliance)
39 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2023-49753İstismar yok | WordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerabilityspoonthemes · adifier system · CWE-22 | Yüksek7,5 | — | %0,6 | 17 May 2024 |
21İzleyin | CVE-2023-25790İstismar yok | WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injectionxtemos · woodmart · CWE-79 | Orta5,3 | — | %0,5 | 24 Nis 2024 |
17İzleyin | CVE-2023-41864İstismar yok | WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerabilitypepro dev. group · peprodev cf7 database · CWE-352 | Orta4,3 | — | %0,2 | 18 Nis 2024 |
34İzleyin | CVE-2022-47151İstismar yok | WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerabilityjoomsky · js help desk · CWE-89 | Yüksek8,6 | — | %0,4 | 17 Nis 2024 |
17İzleyin | CVE-2024-31422İstismar yok | WordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerabilityphilippe bernard · favicon · CWE-352 | Orta4,3 | — | %0,2 | 15 Nis 2024 |
35İzleyin | CVE-2024-31932İstismar yok | WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemes · blocksy companion · CWE-352 | Yüksek8,8 | — | %0,2 | 11 Nis 2024 |
24İzleyin | CVE-2022-47153İstismar yok | WordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilitywpjobboard · jobeleon · CWE-79 | Orta6,1 | — | %0,4 | 29 Mar 2024 |
17İzleyin | CVE-2023-49838İstismar yok | Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbThemeklbtheme · clotya theme · CWE-352 | Orta4,3 | — | %0,3 | 26 Mar 2024 |
28İzleyin | CVE-2023-49839İstismar yok | Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbThemeklbtheme · cosmetsy theme (core plugin) · CWE-79 | Yüksek7,1 | — | %0,5 | 26 Mar 2024 |
28İzleyin | CVE-2024-29103İstismar yok | WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerabilityninjateam · database for contact form 7 · CWE-79 | Yüksek7,1 | — | %0,3 | 19 Mar 2024 |
24İzleyin | CVE-2024-29102İstismar yok | WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerabilityhasthemes · extensions for cf7 · CWE-79 | Orta6,1 | — | %0,3 | 19 Mar 2024 |
39İzleyin | CVE-2022-46839İstismar yok | WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Uploadwiselyhub · js help desk · CWE-434 | Kritik9,8 | — | %0,8 | 5 Oca 2024 |
35İzleyin | CVE-2023-50902İstismar yok | WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)wpexperts · new user approve · CWE-352 | Yüksek8,8 | — | %0,2 | 29 Ara 2023 |
39İzleyin | CVE-2023-49752İstismar yok | WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injectionspoonthemes · adifier · CWE-89 | Kritik9,8 | — | %0,6 | 20 Ara 2023 |
39İzleyin | CVE-2023-49750İstismar yok | WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injectionspoonthemes · couponis · CWE-89 | Kritik9,8 | — | %0,8 | 19 Ara 2023 |
35İzleyin | CVE-2023-48769İstismar yok | WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)bluecoral · chat bubble · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Ara 2023 |
24İzleyin | CVE-2023-49187İstismar yok | WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)spoonthemes · adifier · CWE-79 | Orta6,1 | — | %0,4 | 15 Ara 2023 |
24İzleyin | CVE-2023-49766İstismar yok | WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)themefic · ultimate addons for contact form 7 · CWE-79 | Orta6,1 | — | %0,4 | 14 Ara 2023 |
35İzleyin | CVE-2023-48328İstismar yok | WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)imagely · nextgen gallery · CWE-352 | Yüksek8,8 | — | %0,3 | 30 Kas 2023 |
35İzleyin | CVE-2023-47775İstismar yok | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)gvectors · wpdiscuz · CWE-352 | Yüksek8,8 | — | %0,3 | 22 Kas 2023 |
35İzleyin | CVE-2023-32500İstismar yok | WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)xtemos · woodmart · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
21İzleyin | CVE-2023-28499İstismar yok | WordPress Slide Anything Plugin <= 2.4.9 is vulnerable to Cross Site Scripting (XSS)simonpedge · slide anything-responsive content\/html slider and carousel · CWE-79 | Orta5,4 | — | %0,5 | 7 Kas 2023 |
24İzleyin | CVE-2023-47185İstismar yok | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)gvectors · wpdiscuz · CWE-79 | Orta6,1 | — | %0,4 | 6 Kas 2023 |
24İzleyin | CVE-2023-45071İstismar yok | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)10web · form maker · CWE-79 | Orta6,1 | — | %0,3 | 18 Eki 2023 |
24İzleyin | CVE-2023-45070İstismar yok | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)10web · form maker · CWE-79 | Orta6,1 | — | %0,4 | 18 Eki 2023 |
- CVE-2023-4975330İzleyin
WordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1spoonthemes · adifier system17 May 2024
- CVE-2023-2579021İzleyin
WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection
OrtaCVSS 5,3İstismar yokEPSS %1xtemos · woodmart24 Nis 2024
- CVE-2023-4186417İzleyin
WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0pepro dev. group · peprodev cf7 database18 Nis 2024
- CVE-2022-4715134İzleyin
WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0joomsky · js help desk17 Nis 2024
- CVE-2024-3142217İzleyin
WordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0philippe bernard · favicon15 Nis 2024
- CVE-2024-3193235İzleyin
WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0creativethemes · blocksy companion11 Nis 2024
- CVE-2022-4715324İzleyin
WordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wpjobboard · jobeleon29 Mar 2024
- CVE-2023-4983817İzleyin
Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme
OrtaCVSS 4,3İstismar yokEPSS %0klbtheme · clotya theme26 Mar 2024
- CVE-2023-4983928İzleyin
Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme
YüksekCVSS 7,1İstismar yokEPSS %0klbtheme · cosmetsy theme (core plugin)26 Mar 2024
- CVE-2024-2910328İzleyin
WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0ninjateam · database for contact form 719 Mar 2024
- CVE-2024-2910224İzleyin
WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0hasthemes · extensions for cf719 Mar 2024
- CVE-2022-4683939İzleyin
WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1wiselyhub · js help desk5 Oca 2024
- CVE-2023-5090235İzleyin
WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpexperts · new user approve29 Ara 2023
- CVE-2023-4975239İzleyin
WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1spoonthemes · adifier20 Ara 2023
- CVE-2023-4975039İzleyin
WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1spoonthemes · couponis19 Ara 2023
- CVE-2023-4876935İzleyin
WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0bluecoral · chat bubble18 Ara 2023
- CVE-2023-4918724İzleyin
WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0spoonthemes · adifier15 Ara 2023
- CVE-2023-4976624İzleyin
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0themefic · ultimate addons for contact form 714 Ara 2023
- CVE-2023-4832835İzleyin
WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0imagely · nextgen gallery30 Kas 2023
- CVE-2023-4777535İzleyin
WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0gvectors · wpdiscuz22 Kas 2023
- CVE-2023-3250035İzleyin
WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0xtemos · woodmart9 Kas 2023
- CVE-2023-2849921İzleyin
WordPress Slide Anything Plugin <= 2.4.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0simonpedge · slide anything-responsive content\/html slider and carousel7 Kas 2023
- CVE-2023-4718524İzleyin
WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0gvectors · wpdiscuz6 Kas 2023
- CVE-2023-4507124İzleyin
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %010web · form maker18 Eki 2023
- CVE-2023-4507024İzleyin
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %010web · form maker18 Eki 2023