fullworksplugins kayıtları
fullworksplugins üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %64,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-862 Missing Authorization3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-203 Observable Discrepancy1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2023-25714İstismar yok | WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerabilityfullworks · quick paypal payments · CWE-862 | Yüksek7,5 | — | %0,8 | 9 Ara 2024 |
26İzleyin | CVE-2023-25035İstismar yok | WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerabilityfullworks · quick contact form · CWE-862 | Orta6,5 | — | %0,7 | 9 Ara 2024 |
25İzleyin | CVE-2017-18536Kavram kanıtı | The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.fullworksplugins · stop user enumeration · CWE-79 | Orta6,1 | — | %2,0 | 21 Ağu 2019 |
24İzleyin | CVE-2023-23491Kavram kanıtı | The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' pfullworksplugins · quick event manager · CWE-79 | Orta6,1 | — | %1,2 | 20 Oca 2023 |
24İzleyin | CVE-2023-23979İstismar yok | WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick event manager · CWE-79 | Orta6,1 | — | %0,4 | 6 Nis 2023 |
24İzleyin | CVE-2023-25713İstismar yok | WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick paypal payments · CWE-79 | Orta6,1 | — | %0,4 | 7 Nis 2023 |
21İzleyin | CVE-2017-1000226İstismar yok | Stop User Enumeration 1.3.8 allows user enumeration via the REST APIfullworksplugins · stop user enumeration · CWE-200 | Orta5,3 | — | %1,4 | 17 Kas 2017 |
21İzleyin | CVE-2025-4302Kavram kanıtı | Stop User Enumeration < 1.7.3 - Protection Bypassfullworksplugins · stop user enumeration · CWE-203 | Orta5,3 | — | %0,9 | 17 Tem 2025 |
21İzleyin | CVE-2023-23975İstismar yok | WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerabilityfullworks · quick event manager · CWE-862 | Orta5,3 | — | %0,7 | 9 Ara 2024 |
21İzleyin | CVE-2022-37339İstismar yok | WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityfullworksplugins · meet my team · CWE-79 | Orta5,4 | — | %0,5 | 23 Eyl 2022 |
21İzleyin | CVE-2023-23885İstismar yok | WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick contact form · CWE-79 | Orta5,4 | — | %0,4 | 7 Nis 2023 |
21İzleyin | CVE-2023-23889İstismar yok | WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick paypal payments · CWE-79 | Orta5,4 | — | %0,4 | 25 Nis 2023 |
21İzleyin | CVE-2023-23974İstismar yok | WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)fullworksplugins · quick event manager · CWE-352 | Orta5,4 | — | %0,2 | 1 Mar 2023 |
19İzleyin | CVE-2023-1554İstismar yok | Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSSfullworksplugins · quick paypal payments · CWE-79 | Orta4,8 | — | %0,5 | 2 May 2023 |
19İzleyin | CVE-2023-25702İstismar yok | WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick paypal payments · CWE-79 | Orta4,8 | — | %0,4 | 7 Nis 2023 |
19İzleyin | CVE-2022-47608İstismar yok | WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick contact form · CWE-79 | Orta4,8 | — | %0,4 | 25 Nis 2023 |
19İzleyin | CVE-2022-46863İstismar yok | WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)fullworksplugins · quick event manager · CWE-79 | Orta4,8 | — | %0,4 | 28 Mar 2023 |
- CVE-2023-2571430İzleyin
WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1fullworks · quick paypal payments9 Ara 2024
- CVE-2023-2503526İzleyin
WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1fullworks · quick contact form9 Ara 2024
- CVE-2017-1853625İzleyin
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
OrtaCVSS 6,1Kavram kanıtıEPSS %2fullworksplugins · stop user enumeration21 Ağu 2019
- CVE-2023-2349124İzleyin
The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' p
OrtaCVSS 6,1Kavram kanıtıEPSS %1fullworksplugins · quick event manager20 Oca 2023
- CVE-2023-2397924İzleyin
WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0fullworksplugins · quick event manager6 Nis 2023
- CVE-2023-2571324İzleyin
WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0fullworksplugins · quick paypal payments7 Nis 2023
- CVE-2017-100022621İzleyin
Stop User Enumeration 1.3.8 allows user enumeration via the REST API
OrtaCVSS 5,3İstismar yokEPSS %1fullworksplugins · stop user enumeration17 Kas 2017
- CVE-2025-430221İzleyin
Stop User Enumeration < 1.7.3 - Protection Bypass
OrtaCVSS 5,3Kavram kanıtıEPSS %1fullworksplugins · stop user enumeration17 Tem 2025
- CVE-2023-2397521İzleyin
WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1fullworks · quick event manager9 Ara 2024
- CVE-2022-3733921İzleyin
WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1fullworksplugins · meet my team23 Eyl 2022
- CVE-2023-2388521İzleyin
WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0fullworksplugins · quick contact form7 Nis 2023
- CVE-2023-2388921İzleyin
WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0fullworksplugins · quick paypal payments25 Nis 2023
- CVE-2023-2397421İzleyin
WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 5,4İstismar yokEPSS %0fullworksplugins · quick event manager1 Mar 2023
- CVE-2023-155419İzleyin
Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0fullworksplugins · quick paypal payments2 May 2023
- CVE-2023-2570219İzleyin
WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0fullworksplugins · quick paypal payments7 Nis 2023
- CVE-2022-4760819İzleyin
WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0fullworksplugins · quick contact form25 Nis 2023
- CVE-2022-4686319İzleyin
WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0fullworksplugins · quick event manager28 Mar 2023