cm-wp kayıtları

cm-wp üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %30
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-0477İstismar yok	Auto Featured Image < 3.9.16 - Author+ Arbitrary File Uploadcm-wp · auto featured image · CWE-434 Dosya yükleme	Yüksek8,8	—	%1,6	13 Mar 2023
24İzleyin	CVE-2021-24932İstismar yok	Auto Featured Image < 3.9.3 - Reflected Cross-Site Scriptingcm-wp · auto featured image · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	13 Ara 2021
21İzleyin	CVE-2022-2877İstismar yok	Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofingcm-wp · titan anti-spam \& security · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,7	16 Eyl 2022
21İzleyin	CVE-2021-24196İstismar yok	Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)cm-wp · social slider widget · CWE-79 XSS	Orta5,4	—	%0,7	5 Nis 2021
19İzleyin	CVE-2024-10149İstismar yok	Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgetscm-wp · social slider widget · CWE-79 XSS	Orta4,8	—	%0,3	15 May 2025
19İzleyin	CVE-2024-35751İstismar yok	WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilitycm-wp · woody code snippets · CWE-79 XSS	Orta4,8	—	%0,3	8 Haz 2024
17İzleyin	CVE-2020-36759İstismar yok	Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypasscm-wp · woody code snippets · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,4	20 Eki 2023
17İzleyin	CVE-2024-13337İstismar yok	Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'cm-wp · clearfy · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	12 Nis 2025
17İzleyin	CVE-2024-13338İstismar yok	Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cachecm-wp · clearfy · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	12 Nis 2025
14İzleyin	CVE-2025-0717İstismar yok	Social Slider Feed < 2.2.9 - Admin+ Stored XSScm-wp · social slider widget · CWE-79 XSS	Düşük3,5	—	%0,3	25 Mar 2025

CVE-2023-0477
35İzleyin
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %2
- Dosya yükleme
cm-wp · auto featured image13 Mar 2023
CVE-2021-24932
24İzleyin
Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
cm-wp · auto featured image13 Ara 2021
CVE-2022-2877
21İzleyin
Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
cm-wp · titan anti-spam \& security16 Eyl 2022
CVE-2021-24196
21İzleyin
Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
cm-wp · social slider widget5 Nis 2021
CVE-2024-10149
19İzleyin
Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
cm-wp · social slider widget15 May 2025
CVE-2024-35751
19İzleyin
WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
cm-wp · woody code snippets8 Haz 2024
CVE-2020-36759
17İzleyin
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
cm-wp · woody code snippets20 Eki 2023
CVE-2024-13337
17İzleyin
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
cm-wp · clearfy12 Nis 2025
CVE-2024-13338
17İzleyin
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cache
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
cm-wp · clearfy12 Nis 2025
CVE-2025-0717
14İzleyin
Social Slider Feed < 2.2.9 - Admin+ Stored XSS
DüşükCVSS 3,5İstismar yokEPSS %0
- XSS
cm-wp · social slider widget25 Mar 2025