connekthq kayıtları

connekthq üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 1 · %7,1
Pre-auth RCE: 0
Düzeltme kaydı olan: %35,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2015-10140Silahlaştırılmış	Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletionconnekthq · ajax load more · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%1,6	22 Tem 2025
35İzleyin	CVE-2023-27451İstismar yok	WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)connekthq · instant images · CWE-918 SSRF	Yüksek8,8	—	%0,8	22 Kas 2023
30İzleyin	CVE-2022-2433İstismar yok	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserializationconnekthq · ajax load more · CWE-502 Kimlik doğrulamasız Deserializasyon CSRF	Yüksek7,5	—	%1,5	6 Eyl 2022
28İzleyin	CVE-2021-24140İstismar yok	Ajax Load More < 5.3.2 - Authenticated SQL Injectionconnekthq · ajax load more · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%1,2	18 Mar 2021
28İzleyin	CVE-2024-33569İstismar yok	WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerabilitydarren cooney · instant images · CWE-269	Yüksek7,2	—	%0,5	17 May 2024
26İzleyin	CVE-2024-0869İstismar yok	Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Updateconnekthq · instant images - one click unsplash uploads · CWE-862 Erişim denetimi (IDOR)	Orta6,5	—	%0,7	5 Şub 2024
21İzleyin	CVE-2021-24334İstismar yok	Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFSconnekthq · instant images - one click unsplash uploads · CWE-79 XSS	Orta5,4	—	%0,6	1 Haz 2021
21İzleyin	CVE-2022-4466İstismar yok	WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSSconnekthq · ajax load more · CWE-79 XSS	Orta5,4	—	%0,4	13 Mar 2023
21İzleyin	CVE-2024-4711İstismar yok	WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scriptingconnekthq · ajax load more · CWE-79 XSS	Orta5,4	—	%0,3	31 May 2024
21İzleyin	CVE-2024-8505İstismar yok	WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameterconnekthq · ajax load more · CWE-87 XSS	Orta5,4	—	%0,3	2 Eki 2024
21İzleyin	CVE-2023-50874İstismar yok	WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)connekthq · ajax load more · CWE-79 XSS	Orta5,4	—	%0,3	28 Ara 2023
21İzleyin	CVE-2025-47630İstismar yok	WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerabilityconnekthq · ajax load more · CWE-79 XSS	Orta5,4	—	%0,2	7 May 2025
20İzleyin	CVE-2022-2943İstismar yok	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Readconnekthq · ajax load more · CWE-22 Yol geçişi	Orta4,9	—	%1,7	6 Eyl 2022
11İzleyin	CVE-2022-2945İstismar yok	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversalconnekthq · ajax load more · CWE-22 Yol geçişi	Düşük2,7	—	%1,7	6 Eyl 2022

CVE-2015-10140
40Planlayın
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
YüksekCVSS 8,8SilahlaştırılmışEPSS %1
- Erişim denetimi (IDOR)
connekthq · ajax load more22 Tem 2025
CVE-2023-27451
35İzleyin
WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- SSRF
connekthq · instant images22 Kas 2023
CVE-2022-2433
30İzleyin
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization
YüksekCVSS 7,5İstismar yokEPSS %1
connekthq · ajax load more6 Eyl 2022
CVE-2021-24140
28İzleyin
Ajax Load More < 5.3.2 - Authenticated SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
connekthq · ajax load more18 Mar 2021
CVE-2024-33569
28İzleyin
WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
darren cooney · instant images17 May 2024
CVE-2024-0869
26İzleyin
Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Update
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
connekthq · instant images - one click unsplash uploads5 Şub 2024
CVE-2021-24334
21İzleyin
Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · instant images - one click unsplash uploads1 Haz 2021
CVE-2022-4466
21İzleyin
WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · ajax load more13 Mar 2023
CVE-2024-4711
21İzleyin
WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · ajax load more31 May 2024
CVE-2024-8505
21İzleyin
WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · ajax load more2 Eki 2024
CVE-2023-50874
21İzleyin
WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · ajax load more28 Ara 2023
CVE-2025-47630
21İzleyin
WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
connekthq · ajax load more7 May 2025
CVE-2022-2943
20İzleyin
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
OrtaCVSS 4,9İstismar yokEPSS %1
- Yol geçişi
connekthq · ajax load more6 Eyl 2022
CVE-2022-2945
11İzleyin
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
DüşükCVSS 2,7İstismar yokEPSS %1
- Yol geçişi
connekthq · ajax load more6 Eyl 2022