İçeriğe atla
Noroxi

Accesspressthemes kayıtları

Accesspressthemes üreticisine ait 18 yayımlanmış kayıt.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%5,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2017-16949
    45Planlayın

    An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    accesspressthemes · anonymous post pro18 Ara 2017

  • CVE-2021-24867
    44Planlayın

    Backdoored Plugins & Themes from AccessPress Themes

    KritikCVSS 9,8İstismar yokEPSS %18

    accesspressthemes · accessbuddy21 Şub 2022

  • CVE-2017-15919
    40Planlayın

    The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-

    KritikCVSS 9,8İstismar yokEPSS %2

    accesspressthemes · ultimate-form-builder-lite26 Eki 2017

  • CVE-2021-39317
    36İzleyin

    AccessPress Themes - Authenticated Malicious File Upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    accesspressthemes · access demo importer11 Eki 2021

  • CVE-2021-24143
    35İzleyin

    AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    accesspressthemes · accesspress social icons18 Mar 2021

  • CVE-2023-28661
    35İzleyin

    The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' paramete

    YüksekCVSS 8,8İstismar yokEPSS %0

    accesspressthemes · wp popup banners22 Mar 2023

  • CVE-2023-26518
    35İzleyin

    WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    accesspressthemes · wp tfeed12 Kas 2023

  • CVE-2023-26532
    35İzleyin

    WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    accesspressthemes · social auto poster22 Kas 2023

  • CVE-2022-23976
    32İzleyin

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

    YüksekCVSS 8,1İstismar yokEPSS %0

    accesspressthemes · access demo importer18 Nis 2022

  • CVE-2022-23911
    28İzleyin

    AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    accesspressthemes · ap custom testimonial28 Şub 2022

  • CVE-2021-24858
    28İzleyin

    WP Cookie User Info < 1.0.9 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    accesspressthemes · wp cookie user info24 Oca 2022

  • CVE-2022-23975
    26İzleyin

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation

    OrtaCVSS 6,5İstismar yokEPSS %0

    accesspressthemes · access demo importer18 Nis 2022

  • CVE-2021-25107
    24İzleyin

    Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    accesspressthemes · form store to db14 Şub 2022

  • CVE-2020-25378
    24İzleyin

    Wordpress Plugin Store / AccessPress Themes WP Floating Menu V1.3.0 is affected by: Cross Site Scripting (XSS) via the id GET parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    accesspressthemes · wp floating menu14 Eyl 2020

  • CVE-2022-23912
    24İzleyin

    AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    accesspressthemes · ap custom testimonial28 Şub 2022

  • CVE-2022-0628
    24İzleyin

    AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    accesspressthemes · ap mega menu21 Mar 2022

  • CVE-2023-0175
    21İzleyin

    Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    accesspressthemes · smart logo showcase lite20 Mar 2023

  • CVE-2022-4946
    21İzleyin

    Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect

    OrtaCVSS 5,4İstismar yokEPSS %0

    accesspressthemes · frontend post wordpress plugin5 Haz 2023