AlgolPlus kayıtları
algolplus üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %15,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-862 Missing Authorization1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-10828İstismar yok | Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Detailsalgolplus · advanced order export for woocommerce · CWE-502 | Kritik9,8 | — | %1,5 | 13 Kas 2024 |
36İzleyin | CVE-2024-31266İstismar yok | WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerabilityalgolplus · advanced order export for woocommerce · CWE-94 | Kritik9,1 | — | %0,7 | 25 Nis 2024 |
35İzleyin | CVE-2022-40203İstismar yok | WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Controlalgolplus · advanced dynamic pricing for woocommerce · CWE-862 | Yüksek8,8 | — | %0,4 | 17 Oca 2024 |
33İzleyin | CVE-2018-11525Kavram kanıtı | The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.algolplus · advanced order export for woocommerce · CWE-1236 | Yüksek7,8 | — | %5,1 | 19 Haz 2018 |
27İzleyin | CVE-2021-24169Kavram kanıtı | Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)algolplus · advanced order export for woocommerce · CWE-79 | Orta6,1 | — | %10,3 | 5 Nis 2021 |
26İzleyin | CVE-2022-41655İstismar yok | WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerabilityalgolplus · phone orders for woocommerce · CWE-200 | Orta6,5 | — | %0,7 | 18 Kas 2022 |
26İzleyin | CVE-2022-40128İstismar yok | WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerabilityalgolplus · advanced order export for woocommerce · CWE-352 | Orta6,5 | — | %0,3 | 8 Kas 2022 |
25İzleyin | CVE-2020-11727İstismar yok | A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote aalgolplus · advanced order export for woocommerce · CWE-79 | Orta6,1 | — | %2,0 | 6 May 2020 |
24İzleyin | CVE-2021-27349İstismar yok | Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.algolplus · advanced order export for woocommerce · CWE-79 | Orta6,1 | — | %0,8 | 31 Mar 2021 |
19İzleyin | CVE-2022-35275İstismar yok | WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityalgolplus · advanced order export for woocommerce · CWE-79 | Orta4,8 | — | %0,6 | 9 Eyl 2022 |
17İzleyin | CVE-2022-38095İstismar yok | WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerabilityalgolplus · advanced dynamic pricing for woocommerce · CWE-352 | Orta4,3 | — | %0,3 | 23 Eyl 2022 |
17İzleyin | CVE-2022-43491İstismar yok | WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerabilityalgolplus · advanced dynamic pricing for woocommerce · CWE-352 | Orta4,3 | — | %0,3 | 8 Kas 2022 |
17İzleyin | CVE-2022-43488İstismar yok | WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerabilityalgolplus · advanced dynamic pricing for woocommerce · CWE-352 | Orta4,3 | — | %0,3 | 9 Kas 2022 |
- CVE-2024-1082839İzleyin
Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
KritikCVSS 9,8İstismar yokEPSS %1algolplus · advanced order export for woocommerce13 Kas 2024
- CVE-2024-3126636İzleyin
WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability
KritikCVSS 9,1İstismar yokEPSS %1algolplus · advanced order export for woocommerce25 Nis 2024
- CVE-2022-4020335İzleyin
WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Control
YüksekCVSS 8,8İstismar yokEPSS %0algolplus · advanced dynamic pricing for woocommerce17 Oca 2024
- CVE-2018-1152533İzleyin
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
YüksekCVSS 7,8Kavram kanıtıEPSS %5algolplus · advanced order export for woocommerce19 Haz 2018
- CVE-2021-2416927İzleyin
Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %10algolplus · advanced order export for woocommerce5 Nis 2021
- CVE-2022-4165526İzleyin
WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1algolplus · phone orders for woocommerce18 Kas 2022
- CVE-2022-4012826İzleyin
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0algolplus · advanced order export for woocommerce8 Kas 2022
- CVE-2020-1172725İzleyin
A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote a
OrtaCVSS 6,1İstismar yokEPSS %2algolplus · advanced order export for woocommerce6 May 2020
- CVE-2021-2734924İzleyin
Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.
OrtaCVSS 6,1İstismar yokEPSS %1algolplus · advanced order export for woocommerce31 Mar 2021
- CVE-2022-3527519İzleyin
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1algolplus · advanced order export for woocommerce9 Eyl 2022
- CVE-2022-3809517İzleyin
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0algolplus · advanced dynamic pricing for woocommerce23 Eyl 2022
- CVE-2022-4349117İzleyin
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0algolplus · advanced dynamic pricing for woocommerce8 Kas 2022
- CVE-2022-4348817İzleyin
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0algolplus · advanced dynamic pricing for woocommerce9 Kas 2022