caseproof kayıtları
caseproof üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %16,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-43956İstismar yok | WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerabilitycaseproof · memberpress · CWE-862 | Kritik9,8 | — | %0,4 | 1 Kas 2024 |
30İzleyin | CVE-2024-11299İstismar yok | Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposurecaseproof · memberpress · CWE-200 | Yüksek7,5 | — | %0,3 | 22 Nis 2025 |
29İzleyin | CVE-2015-9457İstismar yok | The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.caseproof · prettylinks · CWE-89 | Yüksek7,2 | — | %1,9 | 10 Eki 2019 |
25İzleyin | CVE-2011-4595Kavram kanıtı | Pretty-Link WordPress plugin 1.5.2 has XSScaseproof · prettylinks · CWE-79 | Orta6,1 | — | %2,4 | 10 Oca 2020 |
25İzleyin | CVE-2024-5031İstismar yok | MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcodecaseproof · memberpress · CWE-918 | Orta6,4 | — | %0,2 | 22 May 2024 |
24İzleyin | CVE-2024-1412İstismar yok | Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and errorcaseproof · memberpress · CWE-79 | Orta6,1 | — | %0,4 | 9 Nis 2024 |
21İzleyin | CVE-2021-24127İstismar yok | ThirstyAffiliates < 3.9.3 - Authenticated Stored XSScaseproof · thirstyaffiliates affiliate link manager · CWE-79 | Orta5,4 | — | %0,6 | 18 Mar 2021 |
21İzleyin | CVE-2022-0398İstismar yok | ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creationcaseproof · thirstyaffiliates affiliate link manager · CWE-352 | Orta5,4 | — | %0,3 | 25 Nis 2022 |
21İzleyin | CVE-2024-5025İstismar yok | MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parametercaseproof · memberpress · CWE-79 | Orta5,4 | — | %0,2 | 22 May 2024 |
19İzleyin | CVE-2013-1636Kavram kanıtı | Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Litecaseproof · prettylinks · CWE-79 | Orta4,3 | — | %6,3 | 12 Mar 2014 |
17İzleyin | CVE-2022-0634İstismar yok | ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRFcaseproof · thirstyaffiliates affiliate link manager · CWE-352 | Orta4,3 | — | %0,3 | 25 Nis 2022 |
17İzleyin | CVE-2024-2326İstismar yok | Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Updatecaseproof · prettylinks · CWE-352 | Orta4,3 | — | %0,2 | 23 Mar 2024 |
- CVE-2024-4395639İzleyin
WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0caseproof · memberpress1 Kas 2024
- CVE-2024-1129930İzleyin
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
YüksekCVSS 7,5İstismar yokEPSS %0caseproof · memberpress22 Nis 2025
- CVE-2015-945729İzleyin
The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.
YüksekCVSS 7,2İstismar yokEPSS %1caseproof · prettylinks10 Eki 2019
- CVE-2011-459525İzleyin
Pretty-Link WordPress plugin 1.5.2 has XSS
OrtaCVSS 6,1Kavram kanıtıEPSS %2caseproof · prettylinks10 Oca 2020
- CVE-2024-503125İzleyin
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
OrtaCVSS 6,4İstismar yokEPSS %0caseproof · memberpress22 May 2024
- CVE-2024-141224İzleyin
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
OrtaCVSS 6,1İstismar yokEPSS %0caseproof · memberpress9 Nis 2024
- CVE-2021-2412721İzleyin
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0caseproof · thirstyaffiliates affiliate link manager18 Mar 2021
- CVE-2022-039821İzleyin
ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
OrtaCVSS 5,4İstismar yokEPSS %0caseproof · thirstyaffiliates affiliate link manager25 Nis 2022
- CVE-2024-502521İzleyin
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
OrtaCVSS 5,4İstismar yokEPSS %0caseproof · memberpress22 May 2024
- CVE-2013-163619İzleyin
Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite
OrtaCVSS 4,3Kavram kanıtıEPSS %6caseproof · prettylinks12 Mar 2014
- CVE-2022-063417İzleyin
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
OrtaCVSS 4,3İstismar yokEPSS %0caseproof · thirstyaffiliates affiliate link manager25 Nis 2022
- CVE-2024-232617İzleyin
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
OrtaCVSS 4,3İstismar yokEPSS %0caseproof · prettylinks23 Mar 2024