İçeriğe atla
Noroxi

awplife kayıtları

awplife üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%29,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2019-17072
    40Planlayın

    The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query

    KritikCVSS 9,8İstismar yokEPSS %1

    awplife · contact form widget10 Eki 2019

  • CVE-2024-1859
    35İzleyin

    Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · slider responsive slideshow1 Mar 2024

  • CVE-2024-35721
    35İzleyin

    WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · image gallery10 Haz 2024

  • CVE-2024-35720
    35İzleyin

    WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · album gallery10 Haz 2024

  • CVE-2024-35722
    35İzleyin

    WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · slider responsive slideshow10 Haz 2024

  • CVE-2024-35717
    35İzleyin

    WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · media slider10 Haz 2024

  • CVE-2023-23646
    35İzleyin

    WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    awplife · album gallery17 Tem 2023

  • CVE-2024-1897
    30İzleyin

    Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode

    YüksekCVSS 7,5İstismar yokEPSS %0

    awordpresslife · grid gallery for images2 May 2024

  • CVE-2024-1895
    30İzleyin

    Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta

    YüksekCVSS 7,5İstismar yokEPSS %0

    awplife · event monster30 Nis 2024

  • CVE-2024-5059
    30İzleyin

    WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    awplife · event monster21 Haz 2024

  • CVE-2022-3720
    28İzleyin

    Event Monster < 1.2.1 - Admin+ SQLi

    YüksekCVSS 7,2İstismar yokEPSS %1

    awplife · event monster21 Kas 2022

  • CVE-2024-5638
    24İzleyin

    Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins

    OrtaCVSS 6,1İstismar yokEPSS %0

    awplife · formula8 Haz 2024

  • CVE-2024-5613
    24İzleyin

    Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action

    OrtaCVSS 6,1İstismar yokEPSS %0

    awplife · formula8 Haz 2024

  • CVE-2024-11396
    22İzleyin

    Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    awplife · event monster13 Oca 2025

  • CVE-2021-24529
    21İzleyin

    Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    awplife · grid gallery23 Ağu 2021

  • CVE-2023-5291
    21İzleyin

    Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    awplife · blog filter3 Eki 2023

  • CVE-2024-1475
    21İzleyin

    Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure

    OrtaCVSS 5,3İstismar yokEPSS %0

    awplife · coming soon maintenance mode28 Şub 2024

  • CVE-2021-24683
    21İzleyin

    Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    awplife · weather effect11 Eki 2021

  • CVE-2023-5295
    21İzleyin

    Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    awplife · blog filter29 Eyl 2023

  • CVE-2024-34754
    21İzleyin

    WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    a wp life · contact form widget3 Haz 2024

  • CVE-2023-47525
    21İzleyin

    WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    awplife · event monster21 Ara 2023

  • CVE-2021-24709
    19İzleyin

    Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    awplife · weather effect11 Eki 2021

  • CVE-2024-1401
    19İzleyin

    Profile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    awplife · profile box shortcode and widget19 Mar 2024

  • CVE-2022-3336
    17İzleyin

    Event Monster < 1.2.0 - Visitors Deletion via CSRF

    OrtaCVSS 4,3İstismar yokEPSS %0

    awplife · event monster21 Kas 2022