Muhammad Daffa (Patchstack Alliance)

124 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
26İzleyin	CVE-2022-46796İstismar yok	WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerabilityvillatheme · curcy · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,5	—	%0,6	13 Ara 2024
26İzleyin	CVE-2022-46795İstismar yok	WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerabilitytychesoftwares · print invoice \& delivery notes for woocommerce · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR) CSRF	Orta6,5	—	%0,6	13 Ara 2024
17İzleyin	CVE-2023-23823İstismar yok	WordPress Enhanced Text Widget plugin <= 1.5.8 - Broken Access Control vulnerabilityclever widgets · enhanced text widget · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	9 Ara 2024
35İzleyin	CVE-2024-43310İstismar yok	WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerabilityukrsolution · print labels with barcodes · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,5	1 Kas 2024
35İzleyin	CVE-2024-43984İstismar yok	WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerabilitypodlove · podlove podcast publisher · CWE-352 Girişsiz RCE CSRF	Yüksek8,8	—	%0,3	31 Eki 2024
28İzleyin	CVE-2024-43997İstismar yok	WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripeasy.jobs · easyjobs · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,3	17 Eki 2024
21İzleyin	CVE-2024-43983İstismar yok	WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerabilitypodlove · podlove podcast publisher · CWE-79 XSS	Orta5,4	—	%0,2	17 Eyl 2024
21İzleyin	CVE-2024-43309İstismar yok	WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerabilitywpsocio · wp telegram widget and join link · CWE-79 XSS	Orta5,4	—	%0,2	18 Ağu 2024
30İzleyin	CVE-2024-5059İstismar yok	WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerabilityawplife · event monster · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,4	21 Haz 2024
21İzleyin	CVE-2024-34754İstismar yok	WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerabilitya wp life · contact form widget · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,3	—	%0,3	3 Haz 2024
32İzleyin	CVE-2023-46784İstismar yok	WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerabilityroom 34 creative services, llc · ics calendar · CWE-22 Kimlik doğrulamasız SSRF Yol geçişi	Yüksek8,2	—	%0,5	17 May 2024
28İzleyin	CVE-2024-33924İstismar yok	WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerabilityrealtyna · realtyna organic idx plugin · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,3	3 May 2024
30İzleyin	CVE-2024-32134İstismar yok	WordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerabilitynasirahmed · forms to zapier, integromat, ifttt, workato, automate.io, elastic.io, built.io, apiant, webhook · CWE-89 SQL enjeksiyonu	Yüksek7,6	—	%0,5	15 Nis 2024
30İzleyin	CVE-2024-32132İstismar yok	WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - SQL Injection vulnerabilitycodeboxr team · cbx bookmark & favorite · CWE-89 SQL enjeksiyonu	Yüksek7,6	—	%0,5	15 Nis 2024
22İzleyin	CVE-2023-52144İstismar yok	WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerabilityrextheme · product feed manager · CWE-22 Yol geçişi	Orta5,5	—	%0,4	15 Nis 2024
30İzleyin	CVE-2024-31356İstismar yok	WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerabilitysolwin infotech · user activity log · CWE-89 SQL enjeksiyonu	Yüksek7,6	—	%0,5	10 Nis 2024
28İzleyin	CVE-2024-31260İstismar yok	WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerabilitywisdmlabs · edwiser bridge · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	7 Nis 2024
28İzleyin	CVE-2024-31116İstismar yok	WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability10web · map builder for google maps · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	31 Mar 2024
21İzleyin	CVE-2024-30523İstismar yok	WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerabilitypaid memberships pro · paid memberships pro – mailchimp add on · CWE-532 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,3	—	%0,4	31 Mar 2024
28İzleyin	CVE-2024-30478İstismar yok	WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerabilityrocksolidplugins · bulletin · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	29 Mar 2024
30İzleyin	CVE-2024-22301İstismar yok	WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposureeduva · albo pretorio online · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,4	24 Oca 2024
35İzleyin	CVE-2023-52142İstismar yok	WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injectioncoolplugins · events shortcodes for the events calendar · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	8 Oca 2024
35İzleyin	CVE-2023-52133İstismar yok	WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injectionwhiletrue · most and least read posts widget · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	31 Ara 2023
28İzleyin	CVE-2023-52132İstismar yok	WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injectionwpadminify · wp adminify · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	31 Ara 2023
28İzleyin	CVE-2023-52131İstismar yok	WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injectionwpzinc · page generator · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	31 Ara 2023

CVE-2022-46796
26İzleyin
WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
villatheme · curcy13 Ara 2024
CVE-2022-46795
26İzleyin
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
- CSRF
tychesoftwares · print invoice \& delivery notes for woocommerce13 Ara 2024
CVE-2023-23823
17İzleyin
WordPress Enhanced Text Widget plugin <= 1.5.8 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
clever widgets · enhanced text widget9 Ara 2024
CVE-2024-43310
35İzleyin
WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
ukrsolution · print labels with barcodes1 Kas 2024
CVE-2024-43984
35İzleyin
WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- CSRF
podlove · podlove podcast publisher31 Eki 2024
CVE-2024-43997
28İzleyin
WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scrip
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
easy.jobs · easyjobs17 Eki 2024
CVE-2024-43983
21İzleyin
WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
podlove · podlove podcast publisher17 Eyl 2024
CVE-2024-43309
21İzleyin
WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wpsocio · wp telegram widget and join link18 Ağu 2024
CVE-2024-5059
30İzleyin
WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
awplife · event monster21 Haz 2024
CVE-2024-34754
21İzleyin
WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
a wp life · contact form widget3 Haz 2024
CVE-2023-46784
32İzleyin
WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
- Yol geçişi
room 34 creative services, llc · ics calendar17 May 2024
CVE-2024-33924
28İzleyin
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
realtyna · realtyna organic idx plugin3 May 2024
CVE-2024-32134
30İzleyin
WordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0
- SQL enjeksiyonu
nasirahmed · forms to zapier, integromat, ifttt, workato, automate.io, elastic.io, built.io, apiant, webhook15 Nis 2024
CVE-2024-32132
30İzleyin
WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0
- SQL enjeksiyonu
codeboxr team · cbx bookmark & favorite15 Nis 2024
CVE-2023-52144
22İzleyin
WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability
OrtaCVSS 5,5İstismar yokEPSS %0
- Yol geçişi
rextheme · product feed manager15 Nis 2024
CVE-2024-31356
30İzleyin
WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0
- SQL enjeksiyonu
solwin infotech · user activity log10 Nis 2024
CVE-2024-31260
28İzleyin
WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
wisdmlabs · edwiser bridge7 Nis 2024
CVE-2024-31116
28İzleyin
WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
10web · map builder for google maps31 Mar 2024
CVE-2024-30523
21İzleyin
WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
paid memberships pro · paid memberships pro – mailchimp add on31 Mar 2024
CVE-2024-30478
28İzleyin
WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
rocksolidplugins · bulletin29 Mar 2024
CVE-2024-22301
30İzleyin
WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
eduva · albo pretorio online24 Oca 2024
CVE-2023-52142
35İzleyin
WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
coolplugins · events shortcodes for the events calendar8 Oca 2024
CVE-2023-52133
35İzleyin
WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
whiletrue · most and least read posts widget31 Ara 2023
CVE-2023-52132
28İzleyin
WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
wpadminify · wp adminify31 Ara 2023
CVE-2023-52131
28İzleyin
WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
wpzinc · page generator31 Ara 2023