businessdirectoryplugin kayıtları
businessdirectoryplugin üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-5803İstismar yok | WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)businessdirectoryplugin · business directory · CWE-352 | Yüksek8,8 | — | %0,3 | 30 Kas 2023 |
33İzleyin | CVE-2024-4443Kavram kanıtı | Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameterbusinessdirectoryplugin · business directory · CWE-89 | Yüksek7,5 | — | %10,4 | 22 May 2024 |
32İzleyin | CVE-2023-5527İstismar yok | Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injectionbusinessdirectoryplugin · business directory · CWE-1236 | Yüksek8,0 | — | %0,5 | 18 Haz 2024 |
21İzleyin | CVE-2023-51516İstismar yok | WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerabilitybusinessdirectoryplugin · business directory · CWE-862 | Orta5,4 | — | %0,3 | 13 Haz 2024 |
- CVE-2023-580335İzleyin
WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0businessdirectoryplugin · business directory30 Kas 2023
- CVE-2024-444333İzleyin
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter
YüksekCVSS 7,5Kavram kanıtıEPSS %10businessdirectoryplugin · business directory22 May 2024
- CVE-2023-552732İzleyin
Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
YüksekCVSS 8,0İstismar yokEPSS %0businessdirectoryplugin · business directory18 Haz 2024
- CVE-2023-5151621İzleyin
WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0businessdirectoryplugin · business directory13 Haz 2024