enviragallery kayıtları
enviragallery üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-862 Missing Authorization2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-43925İstismar yok | WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerabilityenviragallery · envira gallery · CWE-862 | Yüksek8,8 | — | %0,5 | 1 Kas 2024 |
24İzleyin | CVE-2022-2190İstismar yok | Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scriptingenviragallery · envira gallery · CWE-79 | Orta6,1 | — | %0,7 | 31 Eki 2022 |
21İzleyin | CVE-2020-35581İstismar yok | A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML enviragallery · envira gallery · CWE-79 | Orta5,4 | — | %1,3 | 15 Oca 2021 |
21İzleyin | CVE-2020-35582İstismar yok | A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML enviragallery · envira gallery · CWE-79 | Orta5,4 | — | %1,3 | 15 Oca 2021 |
21İzleyin | CVE-2020-9334İstismar yok | A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress.enviragallery · envira gallery · CWE-79 | Orta5,4 | — | %0,7 | 25 Şub 2020 |
21İzleyin | CVE-2021-24126İstismar yok | Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scriptingenviragallery · envira gallery · CWE-79 | Orta5,4 | — | %0,6 | 18 Mar 2021 |
19İzleyin | CVE-2024-3899İstismar yok | Envira Gallery < 1.8.15 - Author+ Stored XSSenviragallery · envira gallery · CWE-79 | Orta4,8 | — | %0,3 | 11 Eyl 2024 |
17İzleyin | CVE-2023-6742İstismar yok | Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_imagesenviragallery · envira gallery · CWE-862 | Orta4,3 | — | %0,4 | 11 Oca 2024 |
- CVE-2024-4392535İzleyin
WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0enviragallery · envira gallery1 Kas 2024
- CVE-2022-219024İzleyin
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0enviragallery · envira gallery31 Eki 2022
- CVE-2020-3558121İzleyin
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML
OrtaCVSS 5,4İstismar yokEPSS %1enviragallery · envira gallery15 Oca 2021
- CVE-2020-3558221İzleyin
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML
OrtaCVSS 5,4İstismar yokEPSS %1enviragallery · envira gallery15 Oca 2021
- CVE-2020-933421İzleyin
A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress.
OrtaCVSS 5,4İstismar yokEPSS %0enviragallery · envira gallery25 Şub 2020
- CVE-2021-2412621İzleyin
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0enviragallery · envira gallery18 Mar 2021
- CVE-2024-389919İzleyin
Envira Gallery < 1.8.15 - Author+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0enviragallery · envira gallery11 Eyl 2024
- CVE-2023-674217İzleyin
Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
OrtaCVSS 4,3İstismar yokEPSS %0enviragallery · envira gallery11 Oca 2024