thiennv (Patchstack Alliance)
135 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
17İzleyin | CVE-2022-41995İstismar yok | WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Controlgalleryape · gallery images ape · CWE-862 | Orta4,3 | — | %0,3 | 2 Oca 2025 |
21İzleyin | CVE-2023-46616İstismar yok | WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerabilitynsquared · draw attention · CWE-862 | Orta5,4 | — | %0,2 | 2 Oca 2025 |
17İzleyin | CVE-2023-46080İstismar yok | WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerabilityfarhan noor · applyonline – application form builder and manager · CWE-862 | Orta4,3 | — | %0,3 | 2 Oca 2025 |
21İzleyin | CVE-2023-45631İstismar yok | WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilitywpdevart · gallery · CWE-862 | Orta5,4 | — | %0,3 | 2 Oca 2025 |
28İzleyin | CVE-2024-56015İstismar yok | WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerabilityjohn godley · tidy up · CWE-352 | Yüksek7,1 | — | %0,1 | 16 Ara 2024 |
17İzleyin | CVE-2023-41951İstismar yok | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerabilityrtcamp · rtmedia for wordpress, buddypress and bbpress · CWE-862 | Orta4,3 | — | %0,5 | 13 Ara 2024 |
17İzleyin | CVE-2023-41869İstismar yok | WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerabilityalex volkov · wp accessibility helper (wah) · CWE-862 | Orta4,3 | — | %0,4 | 13 Ara 2024 |
21İzleyin | CVE-2023-41857İstismar yok | WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerabilityclicktotweet.com · click to tweet · CWE-862 | Orta5,4 | — | %0,4 | 13 Ara 2024 |
26İzleyin | CVE-2023-41649İstismar yok | WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerabilityovic team · ovic product bundle · CWE-862 | Orta6,5 | — | %0,6 | 13 Ara 2024 |
21İzleyin | CVE-2023-36506İstismar yok | WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerabilityyith · yith woocommerce waiting list · CWE-862 | Orta5,3 | — | %0,5 | 13 Ara 2024 |
30İzleyin | CVE-2023-32520İstismar yok | WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerabilitywebcodin · wcp contact form · CWE-862 | Yüksek7,5 | — | %0,7 | 13 Ara 2024 |
17İzleyin | CVE-2023-32519İstismar yok | WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerabilitywebcodin · wcp contact form · CWE-862 | Orta4,3 | — | %0,5 | 13 Ara 2024 |
17İzleyin | CVE-2022-47176İstismar yok | WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerabilityaverta · depicter slider · CWE-862 | Orta4,3 | — | %0,5 | 13 Ara 2024 |
21İzleyin | CVE-2022-44578İstismar yok | WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerabilitypierre jehan · owl carousel · CWE-862 | Orta5,3 | — | %0,5 | 13 Ara 2024 |
21İzleyin | CVE-2023-47830İstismar yok | WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerabilityaddons for contact form 7 · live preview for contact form 7 · CWE-862 | Orta5,4 | — | %0,3 | 9 Ara 2024 |
32İzleyin | CVE-2024-37560İstismar yok | WordPress WP User Switch plugin <= 1.1.0 - Privilege Escalation vulnerabilityiqbalrony · wp user switch · CWE-269 | Yüksek8,0 | — | %0,3 | 12 Tem 2024 |
35İzleyin | CVE-2024-35770İstismar yok | WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerabilitydavekiss · vimeography · CWE-352 | Yüksek8,8 | — | %0,2 | 21 Haz 2024 |
21İzleyin | CVE-2023-51516İstismar yok | WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerabilitybusinessdirectoryplugin · business directory · CWE-862 | Orta5,4 | — | %0,3 | 13 Haz 2024 |
21İzleyin | CVE-2023-37394İstismar yok | WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerabilitywp dummy content generator project · wp dummy content generator · CWE-862 | Orta5,3 | — | %0,3 | 13 Haz 2024 |
21İzleyin | CVE-2023-41240İstismar yok | WordPress Pricing Deals for WooCommercePricing Deals for WooCommerce plugin <= 2.0.3.2 - Broken Access Control vulnerabilityvarktech · pricing deals for woocommerce · CWE-862 | Orta5,3 | — | %0,3 | 12 Haz 2024 |
17İzleyin | CVE-2024-35671İstismar yok | WordPress MJ Update History plugin <= 1.0.4 - Broken Access Control vulnerabilityminoji · mj update history · CWE-862 | Orta4,3 | — | %0,3 | 11 Haz 2024 |
21İzleyin | CVE-2024-32727İstismar yok | WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerabilityrometheme · romethemeform for elementor · CWE-862 | Orta5,3 | — | %0,3 | 9 Haz 2024 |
17İzleyin | CVE-2024-32821İstismar yok | WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerabilitytotalsuite · total poll lite · CWE-862 | Orta4,3 | — | %0,3 | 9 Haz 2024 |
21İzleyin | CVE-2024-33920İstismar yok | WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerabilitykama · democracy poll · CWE-862 | Orta5,3 | — | %0,3 | 3 May 2024 |
17İzleyin | CVE-2024-33677İstismar yok | WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerabilityrenzo johnson · contact form 7 extension for mailchimp · CWE-352 | Orta4,3 | — | %0,2 | 26 Nis 2024 |
- CVE-2022-4199517İzleyin
WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control
OrtaCVSS 4,3İstismar yokEPSS %0galleryape · gallery images ape2 Oca 2025
- CVE-2023-4661621İzleyin
WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0nsquared · draw attention2 Oca 2025
- CVE-2023-4608017İzleyin
WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0farhan noor · applyonline – application form builder and manager2 Oca 2025
- CVE-2023-4563121İzleyin
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wpdevart · gallery2 Oca 2025
- CVE-2024-5601528İzleyin
WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0john godley · tidy up16 Ara 2024
- CVE-2023-4195117İzleyin
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0rtcamp · rtmedia for wordpress, buddypress and bbpress13 Ara 2024
- CVE-2023-4186917İzleyin
WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0alex volkov · wp accessibility helper (wah)13 Ara 2024
- CVE-2023-4185721İzleyin
WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0clicktotweet.com · click to tweet13 Ara 2024
- CVE-2023-4164926İzleyin
WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0ovic team · ovic product bundle13 Ara 2024
- CVE-2023-3650621İzleyin
WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0yith · yith woocommerce waiting list13 Ara 2024
- CVE-2023-3252030İzleyin
WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0webcodin · wcp contact form13 Ara 2024
- CVE-2023-3251917İzleyin
WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0webcodin · wcp contact form13 Ara 2024
- CVE-2022-4717617İzleyin
WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0averta · depicter slider13 Ara 2024
- CVE-2022-4457821İzleyin
WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0pierre jehan · owl carousel13 Ara 2024
- CVE-2023-4783021İzleyin
WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0addons for contact form 7 · live preview for contact form 79 Ara 2024
- CVE-2024-3756032İzleyin
WordPress WP User Switch plugin <= 1.1.0 - Privilege Escalation vulnerability
YüksekCVSS 8,0İstismar yokEPSS %0iqbalrony · wp user switch12 Tem 2024
- CVE-2024-3577035İzleyin
WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0davekiss · vimeography21 Haz 2024
- CVE-2023-5151621İzleyin
WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0businessdirectoryplugin · business directory13 Haz 2024
- CVE-2023-3739421İzleyin
WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wp dummy content generator project · wp dummy content generator13 Haz 2024
- CVE-2023-4124021İzleyin
WordPress Pricing Deals for WooCommercePricing Deals for WooCommerce plugin <= 2.0.3.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0varktech · pricing deals for woocommerce12 Haz 2024
- CVE-2024-3567117İzleyin
WordPress MJ Update History plugin <= 1.0.4 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0minoji · mj update history11 Haz 2024
- CVE-2024-3272721İzleyin
WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0rometheme · romethemeform for elementor9 Haz 2024
- CVE-2024-3282117İzleyin
WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0totalsuite · total poll lite9 Haz 2024
- CVE-2024-3392021İzleyin
WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0kama · democracy poll3 May 2024
- CVE-2024-3367717İzleyin
WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0renzo johnson · contact form 7 extension for mailchimp26 Nis 2024