Majed Refaea (Patchstack Alliance)
84 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-43332İstismar yok | WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerabilitymeowapps · photo engine · CWE-862 | Yüksek8,8 | — | %0,5 | 1 Kas 2024 |
30İzleyin | CVE-2024-43212İstismar yok | WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerabilitymagepeople team · wptravelly · CWE-862 | Yüksek7,5 | — | %0,5 | 1 Kas 2024 |
21İzleyin | CVE-2024-38733İstismar yok | WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerabilitymeks · meks video importer · CWE-862 | Orta5,4 | — | %0,3 | 1 Kas 2024 |
17İzleyin | CVE-2024-38695İstismar yok | WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerabilitymartin gibson · wp gotowebinar · CWE-862 | Orta4,3 | — | %0,4 | 1 Kas 2024 |
26İzleyin | CVE-2024-37214İstismar yok | WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerabilitydropshipping guru · ali2woo lite · CWE-862 | Orta6,5 | — | %0,2 | 1 Kas 2024 |
26İzleyin | CVE-2024-37209İstismar yok | WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerabilityprism it systems · user rights access manager · CWE-862 | Orta6,5 | — | %0,4 | 1 Kas 2024 |
39İzleyin | CVE-2024-37094İstismar yok | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilitystylemixthemes · masterstudy lms · CWE-862 | Kritik9,8 | — | %0,4 | 1 Kas 2024 |
26İzleyin | CVE-2024-38752İstismar yok | WordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerabilityzoho campaigns · zoho campaigns · CWE-79 | Orta6,5 | — | %0,2 | 13 Ağu 2024 |
28İzleyin | CVE-2024-38776İstismar yok | WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerabilitymartin gibson · wp gotowebinar · CWE-352 | Yüksek7,1 | — | %0,1 | 2 Ağu 2024 |
23İzleyin | CVE-2024-39660İstismar yok | WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerabilityjordy meow · photo engine · CWE-79 | Orta5,9 | — | %0,2 | 1 Ağu 2024 |
28İzleyin | CVE-2024-38746İstismar yok | WordPress MakeStories (for Google Web Stories) plugin <= 3.0.3 - Arbitrary File Download and SSRF vulnerabilitymakestories team · makestories (for google web stories) · CWE-22 | Yüksek7,1 | — | %0,4 | 1 Ağu 2024 |
25İzleyin | CVE-2024-38730İstismar yok | WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerabilitywpthemespace · magical addons for elementor · CWE-918 | Orta6,4 | — | %0,2 | 22 Tem 2024 |
24İzleyin | CVE-2024-37211İstismar yok | WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilityali2woo · aliexpress dropshipping with alinext · CWE-79 | Orta6,1 | — | %0,2 | 22 Tem 2024 |
19İzleyin | CVE-2024-38758İstismar yok | WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerabilitywapppress team · wapppress · CWE-918 | Orta4,9 | — | %0,2 | 20 Tem 2024 |
26İzleyin | CVE-2024-38671İstismar yok | WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerabilitymartin gibson · wp gotowebinar · CWE-79 | Orta6,5 | — | %0,3 | 20 Tem 2024 |
28İzleyin | CVE-2024-37961İstismar yok | WordPress codoc plugin <= 0.9.51.12 - Cross Site Scripting (XSS) vulnerabilitycodoc.jp · codoc · CWE-79 | Yüksek7,1 | — | %0,3 | 20 Tem 2024 |
39İzleyin | CVE-2024-37420İstismar yok | WordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerabilitywpzita · zita elementor site library · CWE-434 | Kritik9,9 | — | %0,4 | 9 Tem 2024 |
19İzleyin | CVE-2024-37208İstismar yok | WordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerabilityrobert macchi · wp scraper · CWE-918 | Orta4,9 | — | %0,2 | 6 Tem 2024 |
35İzleyin | CVE-2024-37212İstismar yok | WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerabilityali2woo · aliexpress dropshipping with alinext · CWE-352 | Yüksek8,8 | — | %0,2 | 21 Haz 2024 |
21İzleyin | CVE-2024-35663İstismar yok | WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerabilityhahncreativegroup · wp translate · CWE-862 | Orta5,4 | — | %0,3 | 11 Haz 2024 |
35İzleyin | CVE-2024-35716İstismar yok | WordPress Copymatic plugin <= 1.9 - Broken Access Control vulnerabilitycopymatic · copymatic · CWE-862 | Yüksek8,8 | — | %0,2 | 11 Haz 2024 |
26İzleyin | CVE-2024-35754İstismar yok | WordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerabilityovic importer project · ovic importer · CWE-22 | Orta6,5 | — | %0,5 | 10 Haz 2024 |
39İzleyin | CVE-2024-35661İstismar yok | WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerabilitysoftlabbd · upload fields for wpforms · CWE-862 | Kritik9,8 | — | %0,3 | 9 Haz 2024 |
39İzleyin | CVE-2024-31284İstismar yok | WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerabilitywpdeveloper · embedpress · CWE-862 | Kritik9,8 | — | %0,3 | 9 Haz 2024 |
39İzleyin | CVE-2024-31283İstismar yok | WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerabilityzorem · advanced local pickup for woocommerce · CWE-862 | Kritik9,8 | — | %0,4 | 9 Haz 2024 |
- CVE-2024-4333235İzleyin
WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0meowapps · photo engine1 Kas 2024
- CVE-2024-4321230İzleyin
WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0magepeople team · wptravelly1 Kas 2024
- CVE-2024-3873321İzleyin
WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0meks · meks video importer1 Kas 2024
- CVE-2024-3869517İzleyin
WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0martin gibson · wp gotowebinar1 Kas 2024
- CVE-2024-3721426İzleyin
WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0dropshipping guru · ali2woo lite1 Kas 2024
- CVE-2024-3720926İzleyin
WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0prism it systems · user rights access manager1 Kas 2024
- CVE-2024-3709439İzleyin
WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0stylemixthemes · masterstudy lms1 Kas 2024
- CVE-2024-3875226İzleyin
WordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0zoho campaigns · zoho campaigns13 Ağu 2024
- CVE-2024-3877628İzleyin
WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0martin gibson · wp gotowebinar2 Ağu 2024
- CVE-2024-3966023İzleyin
WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0jordy meow · photo engine1 Ağu 2024
- CVE-2024-3874628İzleyin
WordPress MakeStories (for Google Web Stories) plugin <= 3.0.3 - Arbitrary File Download and SSRF vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0makestories team · makestories (for google web stories)1 Ağu 2024
- CVE-2024-3873025İzleyin
WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 6,4İstismar yokEPSS %0wpthemespace · magical addons for elementor22 Tem 2024
- CVE-2024-3721124İzleyin
WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0ali2woo · aliexpress dropshipping with alinext22 Tem 2024
- CVE-2024-3875819İzleyin
WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0wapppress team · wapppress20 Tem 2024
- CVE-2024-3867126İzleyin
WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0martin gibson · wp gotowebinar20 Tem 2024
- CVE-2024-3796128İzleyin
WordPress codoc plugin <= 0.9.51.12 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0codoc.jp · codoc20 Tem 2024
- CVE-2024-3742039İzleyin
WordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerability
KritikCVSS 9,9İstismar yokEPSS %0wpzita · zita elementor site library9 Tem 2024
- CVE-2024-3720819İzleyin
WordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0robert macchi · wp scraper6 Tem 2024
- CVE-2024-3721235İzleyin
WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0ali2woo · aliexpress dropshipping with alinext21 Haz 2024
- CVE-2024-3566321İzleyin
WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0hahncreativegroup · wp translate11 Haz 2024
- CVE-2024-3571635İzleyin
WordPress Copymatic plugin <= 1.9 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0copymatic · copymatic11 Haz 2024
- CVE-2024-3575426İzleyin
WordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0ovic importer project · ovic importer10 Haz 2024
- CVE-2024-3566139İzleyin
WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0softlabbd · upload fields for wpforms9 Haz 2024
- CVE-2024-3128439İzleyin
WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpdeveloper · embedpress9 Haz 2024
- CVE-2024-3128339İzleyin
WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0zorem · advanced local pickup for woocommerce9 Haz 2024