rezaduty (Patchstack Alliance)
25 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2022-47429İstismar yok | WordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control8degree themes · coming soon landing page and maintenance mode wordpress plugin · CWE-862 | Orta5,3 | — | %0,5 | 13 Ara 2024 |
28İzleyin | CVE-2022-47599İstismar yok | WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injectionbitapps · file manager · CWE-502 | Yüksek7,2 | — | %0,5 | 20 Ara 2023 |
30İzleyin | CVE-2022-47597İstismar yok | WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposurecode-atlantic · popup maker · CWE-200 | Yüksek7,5 | — | %0,6 | 20 Ara 2023 |
35İzleyin | CVE-2022-47159İstismar yok | WordPress Logaster Logo Generator Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)logaster · logo generator · CWE-352 | Yüksek8,8 | — | %0,3 | 25 May 2023 |
35İzleyin | CVE-2022-47139İstismar yok | WordPress WP Basic Elements Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)wp basic elements project · wp basic elements · CWE-352 | Yüksek8,8 | — | %0,3 | 25 May 2023 |
35İzleyin | CVE-2022-47138İstismar yok | WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)login and registration attempts limit project · login and registration attempts limit · CWE-352 | Yüksek8,8 | — | %0,3 | 25 May 2023 |
35İzleyin | CVE-2022-47135İstismar yok | WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)chronoengine · chronoforms · CWE-352 | Yüksek8,8 | — | %0,3 | 25 May 2023 |
35İzleyin | CVE-2022-47448İstismar yok | WordPress xili-tidy-tags Plugin <= 1.12.03 is vulnerable to Cross Site Request Forgery (CSRF)xiligroup · xili-tidy-tags · CWE-352 | Yüksek8,8 | — | %0,3 | 24 May 2023 |
35İzleyin | CVE-2022-47447Kavram kanıtı | WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)internet-formation · wp-advanced-search · CWE-352 | Yüksek8,8 | — | %0,3 | 24 May 2023 |
35İzleyin | CVE-2022-47446İstismar yok | WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)viadat · store locator for wordpress with google maps · CWE-352 | Yüksek8,8 | — | %0,3 | 24 May 2023 |
35İzleyin | CVE-2022-47152İstismar yok | WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)clickfunnels · clickfunnels · CWE-352 | Yüksek8,8 | — | %0,3 | 24 May 2023 |
35İzleyin | CVE-2022-47427İstismar yok | WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)my calendar project · my calendar · CWE-352 | Yüksek8,8 | — | %0,3 | 15 Mar 2023 |
35İzleyin | CVE-2022-47443İstismar yok | WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF)danielpowney · multi rating · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47422İstismar yok | WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)hmplugin · accept stripe donation - aidwp · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47147İstismar yok | WordPress ipBlockList Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)kesz1 · ipblocklist · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47143İstismar yok | WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)themeisle · multiple page generator · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47141İstismar yok | WordPress WP Dynamic Keywords Injector Plugin <= 2.3.15 is vulnerable to Cross Site Request Forgery (CSRF)seerox · wp dynamic keywords injector · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47154İstismar yok | WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)piwebsolution · css js manager\, async javascript\, defer render blocking css supports woocommerce · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
26İzleyin | CVE-2022-47595İstismar yok | WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversalcodecabin · wp go maps · CWE-22 | Orta6,5 | — | %0,8 | 14 Mar 2023 |
19İzleyin | CVE-2022-47171İstismar yok | WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)ip vault - wp firewall project · ip vault - wp firewall · CWE-79 | Orta4,8 | — | %0,4 | 14 Mar 2023 |
30İzleyin | CVE-2022-47163İstismar yok | WordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)wp csv to database project · wp csv to database · CWE-352 | Yüksek7,5 | — | %0,2 | 14 Mar 2023 |
35İzleyin | CVE-2022-47162İstismar yok | WordPress DH – Anti AdBlocker Plugin <= 36 is vulnerable to Cross Site Request Forgery (CSRF)dh - anti adblocker project · dh - anti adblocker · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47155İstismar yok | WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)supsystic · slider · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2022-47440İstismar yok | WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)my tickets project · my tickets · CWE-352 | Yüksek8,8 | — | %0,3 | 13 Mar 2023 |
17İzleyin | CVE-2022-47612İstismar yok | WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)xnau · participants database · CWE-352 | Orta4,3 | — | %0,2 | 28 Şub 2023 |
- CVE-2022-4742921İzleyin
WordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control
OrtaCVSS 5,3İstismar yokEPSS %18degree themes · coming soon landing page and maintenance mode wordpress plugin13 Ara 2024
- CVE-2022-4759928İzleyin
WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %1bitapps · file manager20 Ara 2023
- CVE-2022-4759730İzleyin
WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1code-atlantic · popup maker20 Ara 2023
- CVE-2022-4715935İzleyin
WordPress Logaster Logo Generator Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0logaster · logo generator25 May 2023
- CVE-2022-4713935İzleyin
WordPress WP Basic Elements Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wp basic elements project · wp basic elements25 May 2023
- CVE-2022-4713835İzleyin
WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0login and registration attempts limit project · login and registration attempts limit25 May 2023
- CVE-2022-4713535İzleyin
WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0chronoengine · chronoforms25 May 2023
- CVE-2022-4744835İzleyin
WordPress xili-tidy-tags Plugin <= 1.12.03 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0xiligroup · xili-tidy-tags24 May 2023
- CVE-2022-4744735İzleyin
WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8Kavram kanıtıEPSS %0internet-formation · wp-advanced-search24 May 2023
- CVE-2022-4744635İzleyin
WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0viadat · store locator for wordpress with google maps24 May 2023
- CVE-2022-4715235İzleyin
WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0clickfunnels · clickfunnels24 May 2023
- CVE-2022-4742735İzleyin
WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0my calendar project · my calendar15 Mar 2023
- CVE-2022-4744335İzleyin
WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0danielpowney · multi rating14 Mar 2023
- CVE-2022-4742235İzleyin
WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0hmplugin · accept stripe donation - aidwp14 Mar 2023
- CVE-2022-4714735İzleyin
WordPress ipBlockList Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0kesz1 · ipblocklist14 Mar 2023
- CVE-2022-4714335İzleyin
WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0themeisle · multiple page generator14 Mar 2023
- CVE-2022-4714135İzleyin
WordPress WP Dynamic Keywords Injector Plugin <= 2.3.15 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0seerox · wp dynamic keywords injector14 Mar 2023
- CVE-2022-4715435İzleyin
WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0piwebsolution · css js manager\, async javascript\, defer render blocking css supports woocommerce14 Mar 2023
- CVE-2022-4759526İzleyin
WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal
OrtaCVSS 6,5İstismar yokEPSS %1codecabin · wp go maps14 Mar 2023
- CVE-2022-4717119İzleyin
WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0ip vault - wp firewall project · ip vault - wp firewall14 Mar 2023
- CVE-2022-4716330İzleyin
WordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 7,5İstismar yokEPSS %0wp csv to database project · wp csv to database14 Mar 2023
- CVE-2022-4716235İzleyin
WordPress DH – Anti AdBlocker Plugin <= 36 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0dh - anti adblocker project · dh - anti adblocker14 Mar 2023
- CVE-2022-4715535İzleyin
WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · slider14 Mar 2023
- CVE-2022-4744035İzleyin
WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0my tickets project · my tickets13 Mar 2023
- CVE-2022-4761217İzleyin
WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 4,3İstismar yokEPSS %0xnau · participants database28 Şub 2023