AddonMaster kayıtları
addonmaster üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %44,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-862 Missing Authorization3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-11642İstismar yok | Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusionaddonmaster · post grid master · CWE-22 | Kritik9,8 | — | %1,1 | 9 Oca 2025 |
35İzleyin | CVE-2025-30974İstismar yok | WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerabilityaddonmaster · post grid master · CWE-862 | Yüksek8,8 | — | %0,3 | 6 Haz 2025 |
26İzleyin | CVE-2025-24733İstismar yok | WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerabilityaddonmaster · post grid master · CWE-98 | Orta6,5 | — | %0,6 | 24 Oca 2025 |
26İzleyin | CVE-2024-34390İstismar yok | WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerabilityaddonmaster · post grid master · CWE-79 | Orta6,5 | — | %0,3 | 6 May 2024 |
25İzleyin | CVE-2024-24704İstismar yok | WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerabilityaddonmaster · load more anything · CWE-862 | Orta6,3 | — | %0,3 | 11 Haz 2024 |
24İzleyin | CVE-2025-5084İstismar yok | Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']addonmaster · post grid master · CWE-79 | Orta6,1 | — | %0,5 | 24 Tem 2025 |
24İzleyin | CVE-2024-43156İstismar yok | WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerabilityaddonmaster · post grid master · CWE-79 | Orta6,1 | — | %0,3 | 12 Ağu 2024 |
21İzleyin | CVE-2024-34372İstismar yok | WordPress Post Grid Master plugin <= 3.4.7 - Broken Access Control vulnerabilityaddonmaster · post grid master · CWE-862 | Orta5,3 | — | %0,4 | 6 May 2024 |
21İzleyin | CVE-2023-47851İstismar yok | WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)addonmaster · bootstrap shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,3 | 30 Kas 2023 |
- CVE-2024-1164239İzleyin
Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
KritikCVSS 9,8İstismar yokEPSS %1addonmaster · post grid master9 Oca 2025
- CVE-2025-3097435İzleyin
WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0addonmaster · post grid master6 Haz 2025
- CVE-2025-2473326İzleyin
WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1addonmaster · post grid master24 Oca 2025
- CVE-2024-3439026İzleyin
WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0addonmaster · post grid master6 May 2024
- CVE-2024-2470425İzleyin
WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0addonmaster · load more anything11 Haz 2024
- CVE-2025-508424İzleyin
Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']
OrtaCVSS 6,1İstismar yokEPSS %1addonmaster · post grid master24 Tem 2025
- CVE-2024-4315624İzleyin
WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0addonmaster · post grid master12 Ağu 2024
- CVE-2024-3437221İzleyin
WordPress Post Grid Master plugin <= 3.4.7 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0addonmaster · post grid master6 May 2024
- CVE-2023-4785121İzleyin
WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0addonmaster · bootstrap shortcodes ultimate30 Kas 2023