Noah Stead

16 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
21İzleyin	CVE-2025-2935İstismar yok	Anti-Spam: Spam Protection \| Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actionswebguyio · stop spammers classic · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,1	6 Haz 2025
21İzleyin	CVE-2025-2821İstismar yok	Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modificationquadlayers · search exclude · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,3	6 May 2025
35İzleyin	CVE-2024-11640İstismar yok	VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Uploade4jconnect · vikrentcar · CWE-352 Girişsiz RCE Dosya yükleme CSRF	Yüksek8,8	—	%0,3	8 Mar 2025
17İzleyin	CVE-2024-13883İstismar yok	WPUpper Share Buttons <= 3.51 - Cross-Site Request Forgery to Custom CSS Updatevictorfreitas · wpupper share buttons · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	21 Şub 2025
35İzleyin	CVE-2024-11641İstismar yok	VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Uploadvikwp · vikbooking hotel booking engine \& pms · CWE-352 Girişsiz RCE Dosya yükleme CSRF	Yüksek8,8	—	%0,3	26 Oca 2025
30İzleyin	CVE-2024-12330İstismar yok	WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposuredatabasebackup · wp database backup – unlimited database & files backup by backup for wp · CWE-530 Kimlik doğrulamasız	Yüksek7,5	—	%0,5	9 Oca 2025
17İzleyin	CVE-2024-12206İstismar yok	Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletionstylemix · pearl – header builder · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	9 Oca 2025
25İzleyin	CVE-2024-12112İstismar yok	Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptinghassantafreshi · easy form builder by whitestudio — drag & drop form builder · CWE-79 XSS	Orta6,4	—	%0,2	8 Oca 2025
26İzleyin	CVE-2024-10548İstismar yok	WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST APIwedevs · wp project manager · CWE-200 Bilgi sızıntısı	Orta6,5	—	%0,3	18 Ara 2024
17İzleyin	CVE-2024-12329İstismar yok	Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposureg5plus · essential real estate · CWE-200 Bilgi sızıntısı	Orta4,3	—	%0,3	12 Ara 2024
17İzleyin	CVE-2024-12201İstismar yok	Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creationhashthemes · hash form · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	12 Ara 2024
17İzleyin	CVE-2024-12115İstismar yok	Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplicationays-pro · poll maker · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	6 Ara 2024
17İzleyin	CVE-2024-10606İstismar yok	WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Updatewptravelengine · wp travel engine · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	23 Kas 2024
21İzleyin	CVE-2024-10520İstismar yok	WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletionwedevs · wp project manager · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,3	20 Kas 2024
24İzleyin	CVE-2024-8717İstismar yok	PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scriptingdearhive · dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	24 Eki 2024
24İzleyin	CVE-2024-9951İstismar yok	Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scriptingopajaap · wp photo album plus · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	17 Eki 2024

CVE-2025-2935
21İzleyin
Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
webguyio · stop spammers classic6 Haz 2025
CVE-2025-2821
21İzleyin
Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
quadlayers · search exclude6 May 2025
CVE-2024-11640
35İzleyin
VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %0
e4jconnect · vikrentcar8 Mar 2025
CVE-2024-13883
17İzleyin
WPUpper Share Buttons <= 3.51 - Cross-Site Request Forgery to Custom CSS Update
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
victorfreitas · wpupper share buttons21 Şub 2025
CVE-2024-11641
35İzleyin
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %0
vikwp · vikbooking hotel booking engine \& pms26 Oca 2025
CVE-2024-12330
30İzleyin
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
databasebackup · wp database backup – unlimited database & files backup by backup for wp9 Oca 2025
CVE-2024-12206
17İzleyin
Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
stylemix · pearl – header builder9 Oca 2025
CVE-2024-12112
25İzleyin
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
hassantafreshi · easy form builder by whitestudio — drag & drop form builder8 Oca 2025
CVE-2024-10548
26İzleyin
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
OrtaCVSS 6,5İstismar yokEPSS %0
- Bilgi sızıntısı
wedevs · wp project manager18 Ara 2024
CVE-2024-12329
17İzleyin
Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0
- Bilgi sızıntısı
g5plus · essential real estate12 Ara 2024
CVE-2024-12201
17İzleyin
Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
hashthemes · hash form12 Ara 2024
CVE-2024-12115
17İzleyin
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
ays-pro · poll maker6 Ara 2024
CVE-2024-10606
17İzleyin
WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wptravelengine · wp travel engine23 Kas 2024
CVE-2024-10520
21İzleyin
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wedevs · wp project manager20 Kas 2024
CVE-2024-8717
24İzleyin
PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
dearhive · dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer24 Eki 2024
CVE-2024-9951
24İzleyin
Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opajaap · wp photo album plus17 Eki 2024