Justiice (Patchstack Alliance)
21 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2023-36526İstismar yok | WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerabilityinqsys technology · duplicate post page menu & custom post type · CWE-862 | Orta5,4 | — | %0,6 | 13 Ara 2024 |
17İzleyin | CVE-2022-47604İstismar yok | WordPress AJAX Thumbnail Rebuild plugin <= 1.13 - Broken Access Control vulnerabilityjunkcoder, ristoniinemets · ajax thumbnail rebuild · CWE-862 | Orta4,3 | — | %0,5 | 10 Nis 2024 |
35İzleyin | CVE-2023-32504İstismar yok | WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)kaine · wise chat · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2023 |
35İzleyin | CVE-2023-28420İstismar yok | WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)leocaseiro · custom options plus · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-34033İstismar yok | WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)malinky · malinky-ajax-pagination · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2022-47442İstismar yok | WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injectionayecode · userswp · CWE-1236 | Yüksek8,8 | — | %0,7 | 7 Kas 2023 |
39İzleyin | CVE-2022-46859İstismar yok | WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injectionspiffyplugins · spiffy calendar · CWE-89 | Kritik9,8 | — | %0,6 | 3 Kas 2023 |
19İzleyin | CVE-2023-25063İstismar yok | WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)anadnet · quick page\/post redirect plugin · CWE-79 | Orta4,8 | — | %0,4 | 8 Ağu 2023 |
35İzleyin | CVE-2023-22689İstismar yok | WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Controlflamescorpion · auto affiliate links · CWE-352 | Yüksek8,8 | — | %0,3 | 20 May 2023 |
19İzleyin | CVE-2022-47157İstismar yok | WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)webhammer · wp custom fields search · CWE-79 | Orta4,8 | — | %0,4 | 18 May 2023 |
19İzleyin | CVE-2022-47606İstismar yok | WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)wp-cors project · wp-cors · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
19İzleyin | CVE-2022-47587İstismar yok | WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)wp search analytics project · wp search analytics · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
19İzleyin | CVE-2022-47423İstismar yok | WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)wp-dtree project · wp-dtree · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
19İzleyin | CVE-2022-46861İstismar yok | WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)web-settler · custom login page styler · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
19İzleyin | CVE-2022-46819İstismar yok | WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)gopiplus · continuous announcement scroller · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
19İzleyin | CVE-2022-46817İstismar yok | WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)flyzoo · flyzoo chat · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
21İzleyin | CVE-2023-22696İstismar yok | WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)custom4web · affiliate links lite · CWE-79 | Orta5,4 | — | %0,4 | 10 May 2023 |
21İzleyin | CVE-2022-46844İstismar yok | WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)pixelgrade · pixfields · CWE-79 | Orta5,4 | — | %0,4 | 9 May 2023 |
30İzleyin | CVE-2023-22687İstismar yok | WordPress Freesoul Deactivate Plugins – Plugin manager and cleanup Plugin <= 1.9.4.0 is vulnerable to Sensitive Data Exposurefreesoul deactivate plugins - plugin manager and cleanup project · freesoul deactivate plugins - plugin manager and cleanup · CWE-922 | Yüksek7,5 | — | %0,5 | 16 Nis 2023 |
19İzleyin | CVE-2022-47596İstismar yok | WordPress Media Library Categories Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)jeffrey-wp · media library categories · CWE-79 | Orta4,8 | — | %0,4 | 29 Mar 2023 |
19İzleyin | CVE-2022-46863İstismar yok | WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick event manager · CWE-79 | Orta4,8 | — | %0,4 | 28 Mar 2023 |
- CVE-2023-3652621İzleyin
WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1inqsys technology · duplicate post page menu & custom post type13 Ara 2024
- CVE-2022-4760417İzleyin
WordPress AJAX Thumbnail Rebuild plugin <= 1.13 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %1junkcoder, ristoniinemets · ajax thumbnail rebuild10 Nis 2024
- CVE-2023-3250435İzleyin
WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0kaine · wise chat18 Kas 2023
- CVE-2023-2842035İzleyin
WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0leocaseiro · custom options plus12 Kas 2023
- CVE-2023-3403335İzleyin
WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0malinky · malinky-ajax-pagination9 Kas 2023
- CVE-2022-4744235İzleyin
WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection
YüksekCVSS 8,8İstismar yokEPSS %1ayecode · userswp7 Kas 2023
- CVE-2022-4685939İzleyin
WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1spiffyplugins · spiffy calendar3 Kas 2023
- CVE-2023-2506319İzleyin
WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0anadnet · quick page\/post redirect plugin8 Ağu 2023
- CVE-2023-2268935İzleyin
WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control
YüksekCVSS 8,8İstismar yokEPSS %0flamescorpion · auto affiliate links20 May 2023
- CVE-2022-4715719İzleyin
WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0webhammer · wp custom fields search18 May 2023
- CVE-2022-4760619İzleyin
WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0wp-cors project · wp-cors10 May 2023
- CVE-2022-4758719İzleyin
WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0wp search analytics project · wp search analytics10 May 2023
- CVE-2022-4742319İzleyin
WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0wp-dtree project · wp-dtree10 May 2023
- CVE-2022-4686119İzleyin
WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0web-settler · custom login page styler10 May 2023
- CVE-2022-4681919İzleyin
WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0gopiplus · continuous announcement scroller10 May 2023
- CVE-2022-4681719İzleyin
WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0flyzoo · flyzoo chat10 May 2023
- CVE-2023-2269621İzleyin
WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0custom4web · affiliate links lite10 May 2023
- CVE-2022-4684421İzleyin
WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0pixelgrade · pixfields9 May 2023
- CVE-2023-2268730İzleyin
WordPress Freesoul Deactivate Plugins – Plugin manager and cleanup Plugin <= 1.9.4.0 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1freesoul deactivate plugins - plugin manager and cleanup project · freesoul deactivate plugins - plugin manager and cleanup16 Nis 2023
- CVE-2022-4759619İzleyin
WordPress Media Library Categories Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0jeffrey-wp · media library categories29 Mar 2023
- CVE-2022-4686319İzleyin
WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0fullworksplugins · quick event manager28 Mar 2023