fooplugins kayıtları

fooplugins üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %29,4
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	EPSS · Yayın
35İzleyin	CVE-2023-44233İstismar yok	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)fooplugins · foogallery · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	%0,26 Eki 2023
30İzleyin	CVE-2023-6947İstismar yok	Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversalfooplugins · foogallery · CWE-25 Yol geçişi	Yüksek7,7	%0,710 Ara 2024
25İzleyin	CVE-2023-29439Kavram kanıtı	WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)fooplugins · foogallery · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	%1,716 May 2023
24İzleyin	CVE-2023-44244İstismar yok	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)fooplugins · foogallery · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	%0,42 Eki 2023
21İzleyin	CVE-2021-24357İstismar yok	FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scriptingfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,614 Haz 2021
21İzleyin	CVE-2024-2081İstismar yok	FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scriptingfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,69 Nis 2024
21İzleyin	CVE-2024-2122İstismar yok	FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URLfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,414 Haz 2024
21İzleyin	CVE-2023-6747İstismar yok	FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,43 Oca 2024
21İzleyin	CVE-2024-2762İstismar yok	FooGallery < 2.4.15 - Author+ Stored XSSfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,313 Haz 2024
21İzleyin	CVE-2024-2471İstismar yok	FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fieldsfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,36 Nis 2024
21İzleyin	CVE-2024-12119İstismar yok	FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Titfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,28 Mar 2025
21İzleyin	CVE-2025-6068İstismar yok	FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinfooplugins · foogallery · CWE-79 XSS	Orta5,4	%0,211 Tem 2025
21İzleyin	CVE-2025-5537İstismar yok	Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scriptingfooplugins · foobox · CWE-79 XSS	Orta5,4	%0,28 Tem 2025
19İzleyin	CVE-2019-20182İstismar yok	The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.fooplugins · foogallery · CWE-79 XSS	Orta4,8	%0,79 Oca 2020
19İzleyin	CVE-2024-0604İstismar yok	Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settingsfooplugins · foogallery · CWE-79 XSS	Orta4,8	%0,628 Şub 2024
19İzleyin	CVE-2024-3276İstismar yok	FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSSfooplugins · foobox · CWE-79 XSS	Orta4,8	%0,318 Haz 2024
17İzleyin	CVE-2024-12114İstismar yok	FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitfooplugins · foogallery · CWE-639 Erişim denetimi (IDOR)	Orta4,3	%0,38 Mar 2025

CVE-2023-44233
35İzleyin
WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
fooplugins · foogallery6 Eki 2023
CVE-2023-6947
30İzleyin
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
YüksekCVSS 7,7İstismar yokEPSS %0
- Yol geçişi
fooplugins · foogallery10 Ara 2024
CVE-2023-29439
25İzleyin
WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
fooplugins · foogallery16 May 2023
CVE-2023-44244
24İzleyin
WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
fooplugins · foogallery2 Eki 2023
CVE-2021-24357
21İzleyin
FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery14 Haz 2021
CVE-2024-2081
21İzleyin
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery9 Nis 2024
CVE-2024-2122
21İzleyin
FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery14 Haz 2024
CVE-2023-6747
21İzleyin
FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery3 Oca 2024
CVE-2024-2762
21İzleyin
FooGallery < 2.4.15 - Author+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery13 Haz 2024
CVE-2024-2471
21İzleyin
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery6 Nis 2024
CVE-2024-12119
21İzleyin
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Tit
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery8 Mar 2025
CVE-2025-6068
21İzleyin
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptin
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foogallery11 Tem 2025
CVE-2025-5537
21İzleyin
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
fooplugins · foobox8 Tem 2025
CVE-2019-20182
19İzleyin
The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
fooplugins · foogallery9 Oca 2020
CVE-2024-0604
19İzleyin
Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
fooplugins · foogallery28 Şub 2024
CVE-2024-3276
19İzleyin
FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
fooplugins · foobox18 Haz 2024
CVE-2024-12114
17İzleyin
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbit
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
fooplugins · foogallery8 Mar 2025