FuturioWP kayıtları
futuriowp üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %28,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-40201İstismar yok | WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)futuriowp · futurio extra · CWE-352 | Yüksek8,8 | — | %0,3 | 3 Eki 2023 |
21İzleyin | CVE-2024-53802İstismar yok | WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerabilityfuturiowp · futurio extra · CWE-79 | Orta5,4 | — | %0,3 | 6 Ara 2024 |
21İzleyin | CVE-2024-5646İstismar yok | Futurio Extra <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Text Block Widgetfuturiowp · futurio extra · CWE-79 | Orta5,4 | — | %0,3 | 11 Haz 2024 |
21İzleyin | CVE-2024-50446İstismar yok | WordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityfuturiowp · futurio extra · CWE-79 | Orta5,4 | — | %0,2 | 28 Eki 2024 |
17İzleyin | CVE-2021-25110İstismar yok | Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosurefuturiowp · futurio extra · CWE-200 | Orta4,3 | — | %0,8 | 14 Şub 2022 |
17İzleyin | CVE-2024-10695İstismar yok | Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosurefuturiowp · futurio extra · CWE-639 | Orta4,3 | — | %0,3 | 12 Kas 2024 |
10İzleyin | CVE-2021-25109İstismar yok | Futurio Extra < 1.6.3 - Authenticated SQL Injectionfuturiowp · futurio extra · CWE-89 | Düşük2,7 | — | %0,8 | 14 Şub 2022 |
- CVE-2023-4020135İzleyin
WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0futuriowp · futurio extra3 Eki 2023
- CVE-2024-5380221İzleyin
WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0futuriowp · futurio extra6 Ara 2024
- CVE-2024-564621İzleyin
Futurio Extra <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Text Block Widget
OrtaCVSS 5,4İstismar yokEPSS %0futuriowp · futurio extra11 Haz 2024
- CVE-2024-5044621İzleyin
WordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0futuriowp · futurio extra28 Eki 2024
- CVE-2021-2511017İzleyin
Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure
OrtaCVSS 4,3İstismar yokEPSS %0futuriowp · futurio extra14 Şub 2022
- CVE-2024-1069517İzleyin
Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure
OrtaCVSS 4,3İstismar yokEPSS %0futuriowp · futurio extra12 Kas 2024
- CVE-2021-2510910İzleyin
Futurio Extra < 1.6.3 - Authenticated SQL Injection
DüşükCVSS 2,7İstismar yokEPSS %0futuriowp · futurio extra14 Şub 2022