ali2woo kayıtları
ali2woo üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-2381İstismar yok | AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Uploadali2woo · aliexpress dropshipping with alinext · CWE-434 | Yüksek8,8 | — | %0,9 | 19 Haz 2024 |
35İzleyin | CVE-2024-37212İstismar yok | WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerabilityali2woo · aliexpress dropshipping with alinext · CWE-352 | Yüksek8,8 | — | %0,2 | 21 Haz 2024 |
25İzleyin | CVE-2024-4450İstismar yok | AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functionsali2woo · aliexpress dropshipping with alinext · CWE-862 | Orta6,3 | — | %0,3 | 19 Haz 2024 |
24İzleyin | CVE-2024-37211İstismar yok | WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilityali2woo · aliexpress dropshipping with alinext · CWE-79 | Orta6,1 | — | %0,3 | 22 Tem 2024 |
- CVE-2024-238135İzleyin
AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1ali2woo · aliexpress dropshipping with alinext19 Haz 2024
- CVE-2024-3721235İzleyin
WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0ali2woo · aliexpress dropshipping with alinext21 Haz 2024
- CVE-2024-445025İzleyin
AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions
OrtaCVSS 6,3İstismar yokEPSS %0ali2woo · aliexpress dropshipping with alinext19 Haz 2024
- CVE-2024-3721124İzleyin
WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0ali2woo · aliexpress dropshipping with alinext22 Tem 2024