Friday (Patchstack Alliance)

8 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
21İzleyin	CVE-2023-37989İstismar yok	WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerabilityeasyship · easyship woocommerce shipping rates · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,5	13 Ara 2024
21İzleyin	CVE-2023-29173İstismar yok	WordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerabilityawesome togi · product category tree · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,4	9 Ara 2024
35İzleyin	CVE-2024-30484İstismar yok	WordPress RT Easy Builder plugin <= 2.0 - Broken Access Control vulnerabilityrisethemes · rt easy builder · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	4 Haz 2024
17İzleyin	CVE-2024-32689İstismar yok	WordPress WP Social Comments plugin <= 1.7.3 - Broken Access Control vulnerabilitygenialsouls · wp social comments · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	18 Nis 2024
21İzleyin	CVE-2024-32515İstismar yok	WordPress Mega Addons For Elementor plugin <= 1.8 - Broken Access Control vulnerabilityqamar sheeraz, nasir ahmad · mega addons for elementor · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,4	17 Nis 2024
14İzleyin	CVE-2024-31265İstismar yok	WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerabilitysumome · sumo · CWE-352 Kimlik doğrulamasız CSRF Hizmet dışı bırakma	Düşük3,7	—	%0,2	12 Nis 2024
35İzleyin	CVE-2023-52214İstismar yok	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerabilityvoidcoders · void contact form 7 widget for elementor page builder · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	26 Mar 2024
17İzleyin	CVE-2024-24837İstismar yok	Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress pluginsfrédéric gilles · fg prestashop to woocommerce · CWE-352 Kimlik doğrulamasız CSRF Hizmet dışı bırakma	Orta4,3	—	%0,3	21 Şub 2024

CVE-2023-37989
21İzleyin
WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- Erişim denetimi (IDOR)
easyship · easyship woocommerce shipping rates13 Ara 2024
CVE-2023-29173
21İzleyin
WordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
awesome togi · product category tree9 Ara 2024
CVE-2024-30484
35İzleyin
WordPress RT Easy Builder plugin <= 2.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
risethemes · rt easy builder4 Haz 2024
CVE-2024-32689
17İzleyin
WordPress WP Social Comments plugin <= 1.7.3 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
genialsouls · wp social comments18 Nis 2024
CVE-2024-32515
21İzleyin
WordPress Mega Addons For Elementor plugin <= 1.8 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
qamar sheeraz, nasir ahmad · mega addons for elementor17 Nis 2024
CVE-2024-31265
14İzleyin
WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability
DüşükCVSS 3,7İstismar yokEPSS %0
sumome · sumo12 Nis 2024
CVE-2023-52214
35İzleyin
WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
voidcoders · void contact form 7 widget for elementor page builder26 Mar 2024
CVE-2024-24837
17İzleyin
Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins
OrtaCVSS 4,3İstismar yokEPSS %0
frédéric gilles · fg prestashop to woocommerce21 Şub 2024