İçeriğe atla
Noroxi

Automattic kayıtları

automattic üreticisine ait 82 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %2,4
Pre-auth RCE
5
Düzeltme kaydı olan
%56,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

82 kayıt
  • CVE-2023-28121
    65Bu hafta

    An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on beha

    KritikCVSS 9,8SilahlaştırılmışEPSS %87

    automattic · woocommerce payments12 Nis 2023

  • CVE-2013-2010
    61Bu hafta

    WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    automattic · wp super cache12 Şub 2020

  • CVE-2013-2009
    40Planlayın

    WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    automattic · wp super cache7 Şub 2020

  • CVE-2014-125104
    39İzleyin

    VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    automattic · vaultpress1 Haz 2023

  • CVE-2023-35915
    39İzleyin

    WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    automattic · woopayments20 Ara 2023

  • CVE-2023-51502
    39İzleyin

    WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

    KritikCVSS 9,8İstismar yokEPSS %0

    automattic · woocommerce stripe5 Oca 2024

  • CVE-2024-37424
    39İzleyin

    WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    automattic · newspack blocks9 Tem 2024

  • CVE-2017-17058
    37İzleyin

    The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/ema

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    automattic · woocommerce29 Kas 2017

  • CVE-2013-2011
    37İzleyin

    WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitr

    YüksekCVSS 8,8İstismar yokEPSS %7

    automattic · w3 super cache26 Ara 2019

  • CVE-2021-24209
    36İzleyin

    WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)

    YüksekCVSS 7,2İstismar yokEPSS %27

    automattic · wp super cache5 Nis 2021

  • CVE-2023-2996
    36İzleyin

    Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API

    YüksekCVSS 8,8İstismar yokEPSS %4

    automattic · jetpack27 Haz 2023

  • CVE-2020-8215
    36İzleyin

    A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it proc

    YüksekCVSS 8,8İstismar yokEPSS %2

    automattic · canvas20 Tem 2020

  • CVE-2024-6584
    36İzleyin

    Jetpack Boost < 3.4.7 - Admin+ SSRF

    KritikCVSS 9,1İstismar yokEPSS %0

    automattic · jetpack boost15 May 2025

  • CVE-2021-32789
    35İzleyin

    Arbitrary SQL (SQL injection) possible via the Store API component.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    automattic · woocommerce blocks26 Tem 2021

  • CVE-2022-3342
    35İzleyin

    Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization

    YüksekCVSS 8,8İstismar yokEPSS %1

    automattic · jetpack crm20 Eki 2023

  • CVE-2022-45069
    35İzleyin

    WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · crowdsignal dashboard17 Kas 2022

  • CVE-2024-43968
    35İzleyin

    WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · newspack1 Kas 2024

  • CVE-2023-47788
    35İzleyin

    WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · jetpack19 Haz 2024

  • CVE-2023-47789
    35İzleyin

    WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · canada post shipping method18 Ara 2023

  • CVE-2023-47787
    35İzleyin

    WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · woocommerce bookings18 Ara 2023

  • CVE-2023-51489
    35İzleyin

    WordPress Crowdsignal Polls & Ratings plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    automattic · crowdsignal dashboard15 Mar 2024

  • CVE-2023-35876
    32İzleyin

    WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)

    YüksekCVSS 8,1İstismar yokEPSS %0

    automattic · woocommerce square20 Ara 2023

  • CVE-2011-4673
    31İzleyin

    SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL c

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    wordpress · wordpress2 Ara 2011

  • CVE-2016-10762
    31İzleyin

    The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.

    YüksekCVSS 7,5İstismar yokEPSS %1

    automattic · camptix event ticketing18 Tem 2019

  • CVE-2017-20086
    30İzleyin

    VaultPress Plugin code injection

    YüksekCVSS 7,5İstismar yokEPSS %1

    automattic · vaultpress23 Haz 2022