İçeriğe atla
Noroxi

Rafie Muhammad (Patchstack)

502 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2025-49407
    35İzleyin

    WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    favethemes · houzez28 Ağu 2025

  • CVE-2025-49405
    17İzleyin

    WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    favethemes · houzez28 Ağu 2025

  • CVE-2025-49406
    34İzleyin

    WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    favethemes · houzez20 Ağu 2025

  • CVE-2025-46259
    21İzleyin

    WordPress The Plus Addons for Elementor - Pro Plugin < 6.3.7 - Broken Access Control vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    posimyth innovation · the plus addons for elementor pro1 Tem 2025

  • CVE-2025-47584
    30İzleyin

    WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    themegoods · photography6 Haz 2025

  • CVE-2025-46258
    21İzleyin

    WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    bdthemes · element pack pro5 Haz 2025

  • CVE-2025-46257
    17İzleyin

    WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    bdthemes · element pack pro5 Haz 2025

  • CVE-2024-56006
    21İzleyin

    WordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    automattic · jetpack debug tools15 May 2025

  • CVE-2025-26902
    35İzleyin

    WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brizy · brizy9 Nis 2025

  • CVE-2025-26901
    35İzleyin

    WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brizy · brizy9 Nis 2025

  • CVE-2025-26972
    28İzleyin

    WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    notfound · privatecontent15 Mar 2025

  • CVE-2025-26969
    33İzleyin

    WordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability

    YüksekCVSS 8,3İstismar yokEPSS %0

    aldo latino · privatecontent15 Mar 2025

  • CVE-2024-43333
    30İzleyin

    WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    notfound · admin and site enhancements (ase) pro3 Şub 2025

  • CVE-2025-24653
    17İzleyin

    WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    notfound · admin and site enhancements (ase) pro27 Oca 2025

  • CVE-2025-22763
    24İzleyin

    WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    brizy · brizy21 Oca 2025

  • CVE-2024-56275
    16İzleyin

    WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability

    OrtaCVSS 4,1İstismar yokEPSS %0

    envato · envato elements7 Oca 2025

  • CVE-2024-37241
    17İzleyin

    WordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    automattic · wp job manager - resume manager2 Oca 2025

  • CVE-2023-50850
    17İzleyin

    WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    woo · woocommerce subscriptions31 Ara 2024

  • CVE-2024-37251
    17İzleyin

    WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    wpengine, inc. · advanced custom fields pro16 Ara 2024

  • CVE-2023-38385
    35İzleyin

    WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    artbees · jupiter x core13 Ara 2024

  • CVE-2024-43968
    35İzleyin

    WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · newspack1 Kas 2024

  • CVE-2024-43925
    35İzleyin

    WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    enviragallery · envira gallery1 Kas 2024

  • CVE-2024-43919
    52Planlayın

    WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    yarpp · yet another related posts plugin1 Kas 2024

  • CVE-2024-43302
    35İzleyin

    WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    fontsplugin · fonts1 Kas 2024

  • CVE-2024-43285
    25İzleyin

    WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerability

    OrtaCVSS 6,3İstismar yokEPSS %0

    presto made, inc · presto player1 Kas 2024