edmonsoft kayıtları

edmonsoft üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2022-29423İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerabilityedmonsoft · countdown builder · CWE-264 Kimlik doğrulamasız	Kritik9,8	—	%1,1	6 May 2022
28İzleyin	CVE-2023-3392İstismar yok	Read More & Accordion < 3.2.7 - Admin+ PHP Object Injectionedmonsoft · read more \& accordion · CWE-502 Deserializasyon	Yüksek7,2	—	%1,0	16 Eki 2023
24İzleyin	CVE-2022-0601İstismar yok	Countdown & Clock < 2.2.9 - Reflected Cross-Site Scriptingedmonsoft · countdown\, coming soon\, maintenance - countdown \& clock · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	14 Mar 2022
24İzleyin	CVE-2022-29421İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerabilityedmonsoft · countdown builder · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	6 May 2022
21İzleyin	CVE-2024-2017İstismar yok	Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injectionedmonsoft · countdown builder · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,3	5 Haz 2024
19İzleyin	CVE-2022-29422İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesedmonsoft · countdown builder · CWE-79 XSS	Orta4,8	—	%0,6	6 May 2022
19İzleyin	CVE-2022-29420İstismar yok	WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityedmonsoft · countdown builder · CWE-79 XSS	Orta4,8	—	%0,4	6 May 2022
17İzleyin	CVE-2024-13639İstismar yok	Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletionedmonsoft · read more \& accordion · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	13 Şub 2025

CVE-2022-29423
39İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
edmonsoft · countdown builder6 May 2022
CVE-2023-3392
28İzleyin
Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %1
- Deserializasyon
edmonsoft · read more \& accordion16 Eki 2023
CVE-2022-0601
24İzleyin
Countdown & Clock < 2.2.9 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
edmonsoft · countdown\, coming soon\, maintenance - countdown \& clock14 Mar 2022
CVE-2022-29421
24İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
edmonsoft · countdown builder6 May 2022
CVE-2024-2017
21İzleyin
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
edmonsoft · countdown builder5 Haz 2024
CVE-2022-29422
19İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
edmonsoft · countdown builder6 May 2022
CVE-2022-29420
19İzleyin
WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
edmonsoft · countdown builder6 May 2022
CVE-2024-13639
17İzleyin
Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
edmonsoft · read more \& accordion13 Şub 2025