contest-gallery kayıtları
contest-gallery üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %32,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')22
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-201 Insertion of Sensitive Information Into Sent Data1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-11103İstismar yok | Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeovercontest-gallery · contest gallery · CWE-640 | Kritik9,8 | — | %0,7 | 28 Kas 2024 |
39İzleyin | CVE-2024-30236İstismar yok | WordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerabilitycontest-gallery · contest gallery · CWE-89 | Kritik9,9 | — | %0,6 | 28 Mar 2024 |
39İzleyin | CVE-2024-10687İstismar yok | Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated contest-gallery · contest gallery · CWE-89 | Kritik9,8 | — | %0,6 | 5 Kas 2024 |
35İzleyin | CVE-2019-5974İstismar yok | Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authenticacontest-gallery · contest gallery · CWE-352 | Yüksek8,8 | — | %1,0 | 5 Tem 2019 |
35İzleyin | CVE-2022-36394İstismar yok | WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerabilitycontest-gallery · contest gallery · CWE-89 | Yüksek8,8 | — | %0,9 | 23 Ağu 2022 |
35İzleyin | CVE-2024-30238İstismar yok | WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerabilitycontest-gallery · contest gallery · CWE-89 | Yüksek8,8 | — | %0,6 | 27 Mar 2024 |
35İzleyin | CVE-2024-24887İstismar yok | WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)contest-gallery · contest gallery · CWE-352 | Yüksek8,8 | — | %0,2 | 12 Şub 2024 |
32İzleyin | CVE-2024-32778İstismar yok | WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerabilitycontest-gallery · contest gallery · CWE-22 | Yüksek8,1 | — | %0,6 | 9 Haz 2024 |
30İzleyin | CVE-2024-43283Kavram kanıtı | WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerabilitycontest-gallery · contest gallery · CWE-201 | Yüksek7,5 | — | %1,0 | 26 Ağu 2024 |
30İzleyin | CVE-2022-4156İstismar yok | Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injectioncontest-gallery · contest gallery · CWE-89 | Yüksek7,5 | — | %1,0 | 26 Ara 2022 |
30İzleyin | CVE-2022-4158İstismar yok | Contest Gallery < 19.1.5 - Unauthenticated SQL Injectioncontest-gallery · contest gallery · CWE-89 | Yüksek7,5 | — | %0,9 | 26 Ara 2022 |
28İzleyin | CVE-2025-22693İstismar yok | WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerabilitycontest-gallery · contest gallery · CWE-89 | Yüksek7,2 | — | %0,5 | 3 Şub 2025 |
26İzleyin | CVE-2022-4160İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4165İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4150İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4151İstismar yok | Contest Gallery < 19.1.5 - Admin+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4152İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4153İstismar yok | Contest Gallery < 19.1.5.1 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4159İstismar yok | Contest Gallery < 19.1.5.1 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4161İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4162İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4163İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4164İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
26İzleyin | CVE-2022-4166İstismar yok | Contest Gallery < 19.1.5 - Author+ SQL Injectioncontest-gallery · contest gallery · CWE-89 | Orta6,5 | — | %0,9 | 26 Ara 2022 |
24İzleyin | CVE-2023-5307İstismar yok | Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headerscontest-gallery · contest gallery · CWE-79 | Orta6,1 | — | %0,5 | 31 Eki 2023 |
- CVE-2024-1110339İzleyin
Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover
KritikCVSS 9,8İstismar yokEPSS %0contest-gallery · contest gallery28 Kas 2024
- CVE-2024-3023639İzleyin
WordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerability
KritikCVSS 9,9İstismar yokEPSS %0contest-gallery · contest gallery28 Mar 2024
- CVE-2024-1068739İzleyin
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated
KritikCVSS 9,8İstismar yokEPSS %0contest-gallery · contest gallery5 Kas 2024
- CVE-2019-597435İzleyin
Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentica
YüksekCVSS 8,8İstismar yokEPSS %1contest-gallery · contest gallery5 Tem 2019
- CVE-2022-3639435İzleyin
WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0contest-gallery · contest gallery23 Ağu 2022
- CVE-2024-3023835İzleyin
WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0contest-gallery · contest gallery27 Mar 2024
- CVE-2024-2488735İzleyin
WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0contest-gallery · contest gallery12 Şub 2024
- CVE-2024-3277832İzleyin
WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0contest-gallery · contest gallery9 Haz 2024
- CVE-2024-4328330İzleyin
WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability
YüksekCVSS 7,5Kavram kanıtıEPSS %1contest-gallery · contest gallery26 Ağu 2024
- CVE-2022-415630İzleyin
Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %1contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415830İzleyin
Contest Gallery < 19.1.5 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2025-2269328İzleyin
WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0contest-gallery · contest gallery3 Şub 2025
- CVE-2022-416026İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416526İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415026İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415126İzleyin
Contest Gallery < 19.1.5 - Admin+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415226İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415326İzleyin
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-415926İzleyin
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416126İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416226İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416326İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416426İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2022-416626İzleyin
Contest Gallery < 19.1.5 - Author+ SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0contest-gallery · contest gallery26 Ara 2022
- CVE-2023-530724İzleyin
Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers
OrtaCVSS 6,1İstismar yokEPSS %0contest-gallery · contest gallery31 Eki 2023