emarketdesign kayıtları

emarketdesign üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %18,2
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

11 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	EPSS · Yayın
35İzleyin	CVE-2022-2240İstismar yok	Request a Quote <= 2.3.7 - CSV Injectionemarketdesign · request a quote · CWE-1236 Kimlik doğrulamasız	Yüksek8,8	%1,425 Tem 2022
35İzleyin	CVE-2023-40558İstismar yok	WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)emarketdesign · youtube video gallery · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	%0,23 Eki 2023
25İzleyin	CVE-2025-5539İstismar yok	Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingemarketdesign · wp easy contact · CWE-79 XSS	Orta6,4	%0,24 Haz 2025
23İzleyin	CVE-2024-6231İstismar yok	Request a Quote < 2.4.1 - Admin+ Stored XSSemarketdesign · request a quote · CWE-79 XSS	Orta5,9	%0,323 Tem 2024
21İzleyin	CVE-2021-24420İstismar yok	Request a Quote < 2.3.4 - Authenticated Stored XSSemarketdesign · request a quote · CWE-79 XSS	Orta5,4	%0,612 Tem 2021
21İzleyin	CVE-2024-3268İstismar yok	YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creationemarketdesign · youtube video gallery · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	%0,321 May 2024
21İzleyin	CVE-2025-5540İstismar yok	Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingemarketdesign · event rsvp and simple event management · CWE-79 XSS	Orta5,4	%0,225 Haz 2025
19İzleyin	CVE-2022-2239İstismar yok	Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scriptingemarketdesign · request a quote · CWE-79 XSS	Orta4,8	%0,625 Tem 2022
19İzleyin	CVE-2021-24622İstismar yok	WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scriptingemarketdesign · customer service software \& support ticket system · CWE-79 XSS	Orta4,8	%0,618 Eki 2021
19İzleyin	CVE-2021-24489İstismar yok	Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scriptingemarketdesign · request a quote · CWE-79 XSS	Orta4,8	%0,625 Eki 2021
19İzleyin	CVE-2022-2151İstismar yok	Best Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scriptingemarketdesign · best contact management software · CWE-79 XSS	Orta4,8	%0,517 Tem 2022

CVE-2022-2240
35İzleyin
Request a Quote <= 2.3.7 - CSV Injection
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
emarketdesign · request a quote25 Tem 2022
CVE-2023-40558
35İzleyin
WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
emarketdesign · youtube video gallery3 Eki 2023
CVE-2025-5539
25İzleyin
Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
emarketdesign · wp easy contact4 Haz 2025
CVE-2024-6231
23İzleyin
Request a Quote < 2.4.1 - Admin+ Stored XSS
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
emarketdesign · request a quote23 Tem 2024
CVE-2021-24420
21İzleyin
Request a Quote < 2.3.4 - Authenticated Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
emarketdesign · request a quote12 Tem 2021
CVE-2024-3268
21İzleyin
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
emarketdesign · youtube video gallery21 May 2024
CVE-2025-5540
21İzleyin
Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
emarketdesign · event rsvp and simple event management25 Haz 2025
CVE-2022-2239
19İzleyin
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
emarketdesign · request a quote25 Tem 2022
CVE-2021-24622
19İzleyin
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
emarketdesign · customer service software \& support ticket system18 Eki 2021
CVE-2021-24489
19İzleyin
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
emarketdesign · request a quote25 Eki 2021
CVE-2022-2151
19İzleyin
Best Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
emarketdesign · best contact management software17 Tem 2022