Lana Codes (Patchstack Alliance)
103 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-34384İstismar yok | WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)kebo twitter feed project · kebo twitter feed · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-34378İstismar yok | WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)scriptburn · wp hide post · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-28694İstismar yok | WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)wbcomdesigns · buddypress activity social share · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-28495İstismar yok | WordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)mythemeshop · wp shortcode · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
35İzleyin | CVE-2023-32587İstismar yok | WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)wpreactions · wp reactions lite · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-32579İstismar yok | WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Controldesignsandcode · forget about shortcode buttons · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-34386İstismar yok | WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)wpclever · wpc smart wishlist for woocommerce · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-41732İstismar yok | WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)dwbooster · cp blocks · CWE-352 | Yüksek8,8 | — | %0,2 | 6 Eki 2023 |
35İzleyin | CVE-2023-40202İstismar yok | WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)codemiq · wp html mail · CWE-352 | Yüksek8,8 | — | %0,2 | 3 Eki 2023 |
35İzleyin | CVE-2023-40201İstismar yok | WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)futuriowp · futurio extra · CWE-352 | Yüksek8,8 | — | %0,3 | 3 Eki 2023 |
35İzleyin | CVE-2023-39923İstismar yok | WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)radiustheme · the post grid · CWE-352 | Yüksek8,8 | — | %0,2 | 3 Eki 2023 |
35İzleyin | CVE-2023-37891İstismar yok | WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)optimonk · optimonk\ · CWE-352 | Yüksek8,8 | — | %0,2 | 3 Eki 2023 |
21İzleyin | CVE-2023-25981İstismar yok | WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)themekraft · post form · CWE-79 | Orta5,4 | — | %0,3 | 25 Ağu 2023 |
21İzleyin | CVE-2023-23828İstismar yok | WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)swas · wp category post list · CWE-79 | Orta5,4 | — | %0,3 | 10 Ağu 2023 |
21İzleyin | CVE-2023-23826İstismar yok | WordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)webmechanix · add posts to pages · CWE-79 | Orta5,4 | — | %0,3 | 10 Ağu 2023 |
21İzleyin | CVE-2023-23877İstismar yok | WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)bkmacdaddy · pinterest rss widget · CWE-79 | Orta5,4 | — | %0,3 | 8 Ağu 2023 |
19İzleyin | CVE-2023-23829İstismar yok | WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)pierre-jehan · owl carousel · CWE-79 | Orta4,8 | — | %0,3 | 8 Ağu 2023 |
21İzleyin | CVE-2023-23833İstismar yok | WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS)drop shadow boxes project · drop shadow boxes · CWE-79 | Orta5,4 | — | %0,3 | 25 Tem 2023 |
35İzleyin | CVE-2022-34155Kavram kanıtı | WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authenticationminiorange · oauth single sign on · CWE-287 | Yüksek8,8 | — | %0,9 | 18 Tem 2023 |
35İzleyin | CVE-2023-37387İstismar yok | WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)radiustheme · classified listing · CWE-352 | Yüksek8,8 | — | %0,2 | 18 Tem 2023 |
35İzleyin | CVE-2023-37386İstismar yok | WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)codexin · media library helper · CWE-352 | Yüksek8,8 | — | %0,2 | 18 Tem 2023 |
35İzleyin | CVE-2022-38062İstismar yok | WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)metagauss · download theme · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Tem 2023 |
35İzleyin | CVE-2022-36424İstismar yok | WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)easy-appointments · easy appointments · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Tem 2023 |
35İzleyin | CVE-2023-35096İstismar yok | WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)wpexperts · mycred · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Tem 2023 |
35İzleyin | CVE-2023-23719İstismar yok | WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)premmerce · premmerce · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Tem 2023 |
- CVE-2023-3438435İzleyin
WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0kebo twitter feed project · kebo twitter feed12 Kas 2023
- CVE-2023-3437835İzleyin
WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0scriptburn · wp hide post12 Kas 2023
- CVE-2023-2869435İzleyin
WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wbcomdesigns · buddypress activity social share12 Kas 2023
- CVE-2023-2849535İzleyin
WordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0mythemeshop · wp shortcode12 Kas 2023
- CVE-2023-3258735İzleyin
WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpreactions · wp reactions lite9 Kas 2023
- CVE-2023-3257935İzleyin
WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control
YüksekCVSS 8,8İstismar yokEPSS %0designsandcode · forget about shortcode buttons9 Kas 2023
- CVE-2023-3438635İzleyin
WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpclever · wpc smart wishlist for woocommerce9 Kas 2023
- CVE-2023-4173235İzleyin
WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0dwbooster · cp blocks6 Eki 2023
- CVE-2023-4020235İzleyin
WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0codemiq · wp html mail3 Eki 2023
- CVE-2023-4020135İzleyin
WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0futuriowp · futurio extra3 Eki 2023
- CVE-2023-3992335İzleyin
WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0radiustheme · the post grid3 Eki 2023
- CVE-2023-3789135İzleyin
WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0optimonk · optimonk\3 Eki 2023
- CVE-2023-2598121İzleyin
WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0themekraft · post form25 Ağu 2023
- CVE-2023-2382821İzleyin
WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0swas · wp category post list10 Ağu 2023
- CVE-2023-2382621İzleyin
WordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0webmechanix · add posts to pages10 Ağu 2023
- CVE-2023-2387721İzleyin
WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0bkmacdaddy · pinterest rss widget8 Ağu 2023
- CVE-2023-2382919İzleyin
WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0pierre-jehan · owl carousel8 Ağu 2023
- CVE-2023-2383321İzleyin
WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0drop shadow boxes project · drop shadow boxes25 Tem 2023
- CVE-2022-3415535İzleyin
WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
YüksekCVSS 8,8Kavram kanıtıEPSS %0miniorange · oauth single sign on18 Tem 2023
- CVE-2023-3738735İzleyin
WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0radiustheme · classified listing18 Tem 2023
- CVE-2023-3738635İzleyin
WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0codexin · media library helper18 Tem 2023
- CVE-2022-3806235İzleyin
WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0metagauss · download theme17 Tem 2023
- CVE-2022-3642435İzleyin
WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0easy-appointments · easy appointments17 Tem 2023
- CVE-2023-3509635İzleyin
WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpexperts · mycred17 Tem 2023
- CVE-2023-2371935İzleyin
WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0premmerce · premmerce17 Tem 2023