colorlib kayıtları

colorlib üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %20
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
59Planlayın	CVE-2020-36708Kavram kanıtı	Epsilon Framework Themes (Various Versions) - Function Injectioncolorlib · activello · CWE-94 pre-auth RCE	Kritik9,8	—	%65,3	6 Haz 2023
26İzleyin	CVE-2020-36721İstismar yok	Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivationcolorlib · activello · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,5	—	%1,0	6 Haz 2023
24İzleyin	CVE-2025-3662İstismar yok	FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSScolorlib · fancybox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,2	3 Haz 2025
21İzleyin	CVE-2024-1473İstismar yok	Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposurecolorlib · coming soon \& maintenance mode · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	20 Mar 2024
21İzleyin	CVE-2022-45849İstismar yok	WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)colorlib · activello theme · CWE-79 XSS	Orta5,4	—	%0,5	16 Nis 2023
21İzleyin	CVE-2022-45358İstismar yok	WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)colorlib · activello · CWE-79 XSS	Orta5,4	—	%0,4	13 Nis 2023
19İzleyin	CVE-2015-1494Kavram kanıtı	The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct crocolorlib · fancybox · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%6,4	17 Şub 2015
19İzleyin	CVE-2022-1945İstismar yok	Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scriptingcolorlib · coming soon \& maintenance mode · CWE-79 XSS	Orta4,8	—	%0,6	20 Haz 2022
19İzleyin	CVE-2024-0662İstismar yok	The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 dcolorlib · fancybox · CWE-79 XSS	Orta4,8	—	%0,5	9 Nis 2024
17İzleyin	CVE-2024-49321İstismar yok	WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerabilitycolorlib · simple custom post order · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	21 Eki 2024

CVE-2020-36708
59Planlayın
Epsilon Framework Themes (Various Versions) - Function Injection
KritikCVSS 9,8Kavram kanıtıEPSS %65
- pre-auth RCE
colorlib · activello6 Haz 2023
CVE-2020-36721
26İzleyin
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
colorlib · activello6 Haz 2023
CVE-2025-3662
24İzleyin
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
colorlib · fancybox3 Haz 2025
CVE-2024-1473
21İzleyin
Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
colorlib · coming soon \& maintenance mode20 Mar 2024
CVE-2022-45849
21İzleyin
WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
colorlib · activello theme16 Nis 2023
CVE-2022-45358
21İzleyin
WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
colorlib · activello13 Nis 2023
CVE-2015-1494
19İzleyin
The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cro
OrtaCVSS 4,3Kavram kanıtıEPSS %6
- Kimlik doğrulamasız
- XSS
colorlib · fancybox17 Şub 2015
CVE-2022-1945
19İzleyin
Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
colorlib · coming soon \& maintenance mode20 Haz 2022
CVE-2024-0662
19İzleyin
The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 d
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
colorlib · fancybox9 Nis 2024
CVE-2024-49321
17İzleyin
WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
colorlib · simple custom post order21 Eki 2024