ampforwp kayıtları

ampforwp üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %28,6
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2024-9598İstismar yok	AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalationampforwp · accelerated mobile pages · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	25 Eki 2024
26İzleyin	CVE-2024-1043İstismar yok	AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_dataampforwp · accelerated mobile pages · CWE-285 Erişim denetimi (IDOR) Hizmet dışı bırakma	Orta6,5	—	%0,7	28 Şub 2024
24İzleyin	CVE-2024-0587İstismar yok	Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scriptingampforwp · accelerated mobile pages · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	23 Oca 2024
24İzleyin	CVE-2024-11254İstismar yok	AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scriptingampforwp · accelerated mobile pages · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	18 Ara 2024
21İzleyin	CVE-2024-6896İstismar yok	AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadampforwp · accelerated mobile pages · CWE-79 XSS	Orta5,4	—	%0,3	24 Tem 2024
19İzleyin	CVE-2021-23150İstismar yok	WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityampforwp · accelerated mobile pages · CWE-79 XSS	Orta4,8	—	%0,6	18 Mar 2022
19İzleyin	CVE-2021-23209İstismar yok	WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesampforwp · accelerated mobile pages · CWE-79 XSS	Orta4,8	—	%0,6	18 Mar 2022

CVE-2024-9598
35İzleyin
AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
ampforwp · accelerated mobile pages25 Eki 2024
CVE-2024-1043
26İzleyin
AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
ampforwp · accelerated mobile pages28 Şub 2024
CVE-2024-0587
24İzleyin
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
ampforwp · accelerated mobile pages23 Oca 2024
CVE-2024-11254
24İzleyin
AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
ampforwp · accelerated mobile pages18 Ara 2024
CVE-2024-6896
21İzleyin
AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
ampforwp · accelerated mobile pages24 Tem 2024
CVE-2021-23150
19İzleyin
WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
ampforwp · accelerated mobile pages18 Mar 2022
CVE-2021-23209
19İzleyin
WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
ampforwp · accelerated mobile pages18 Mar 2022