getshortcodes kayıtları
getshortcodes üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %28
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')18
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-20 Improper Input Validation1
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2017-18580Kavram kanıtı | The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.getshortcodes · shortcodes ultimate · CWE-20 | Kritik9,8 | — | %12,1 | 22 Ağu 2019 |
35İzleyin | CVE-2022-41136İstismar yok | WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Yüksek8,8 | — | %0,3 | 8 Kas 2022 |
26İzleyin | CVE-2023-0911İstismar yok | Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosuregetshortcodes · shortcodes ultimate · CWE-862 | Orta6,5 | — | %0,7 | 20 Mar 2023 |
26İzleyin | CVE-2023-0890İstismar yok | Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Accessgetshortcodes · shortcodes ultimate · CWE-862 | Orta6,5 | — | %0,7 | 20 Mar 2023 |
26İzleyin | CVE-2023-23800İstismar yok | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)getshortcodes · shortcodes ultimate · CWE-918 | Orta6,5 | — | %0,5 | 12 Kas 2023 |
25İzleyin | CVE-2024-3188İstismar yok | Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta6,3 | — | %0,4 | 26 Nis 2024 |
24İzleyin | CVE-2024-3548İstismar yok | Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta6,1 | — | %0,4 | 15 May 2024 |
21İzleyin | CVE-2017-2245İstismar yok | Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecigetshortcodes · shortcodes ultimate · CWE-22 | Orta5,0 | — | %2,6 | 7 Tem 2017 |
21İzleyin | CVE-2021-24525İstismar yok | Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,6 | 20 Eyl 2021 |
21İzleyin | CVE-2024-3550İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,6 | 2 May 2024 |
21İzleyin | CVE-2023-6225İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scriptinggetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,5 | 28 Kas 2023 |
21İzleyin | CVE-2024-1510İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,5 | 19 Şub 2024 |
21İzleyin | CVE-2023-6488İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinggetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,5 | 18 Ara 2023 |
21İzleyin | CVE-2024-0792İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,4 | 28 Şub 2024 |
21İzleyin | CVE-2023-25040İstismar yok | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS)getshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,4 | 30 Mar 2023 |
21İzleyin | CVE-2024-2583İstismar yok | Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,4 | 13 Nis 2024 |
21İzleyin | CVE-2024-8500İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinggetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,4 | 23 Eki 2024 |
21İzleyin | CVE-2024-4821İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,3 | 5 Haz 2024 |
21İzleyin | CVE-2024-1808İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,3 | 28 Şub 2024 |
21İzleyin | CVE-2024-6766İstismar yok | Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,3 | 6 Ağu 2024 |
21İzleyin | CVE-2024-4553İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcodegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,3 | 21 May 2024 |
21İzleyin | CVE-2025-5567İstismar yok | Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attributegetshortcodes · shortcodes ultimate · CWE-79 | Orta5,4 | — | %0,2 | 3 Tem 2025 |
18İzleyin | CVE-2024-4217İstismar yok | Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSSgetshortcodes · shortcodes ultimate · CWE-79 | Orta4,7 | — | %0,5 | 13 Tem 2024 |
17İzleyin | CVE-2023-6226İstismar yok | WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosuregetshortcodes · shortcodes ultimate · CWE-639 | Orta4,3 | — | %0,5 | 28 Kas 2023 |
17İzleyin | CVE-2022-38086İstismar yok | WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerabilitygetshortcodes · shortcodes ultimate · CWE-352 | Orta4,3 | — | %0,3 | 11 Eki 2022 |
- CVE-2017-1858043Planlayın
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
KritikCVSS 9,8Kavram kanıtıEPSS %12getshortcodes · shortcodes ultimate22 Ağu 2019
- CVE-2022-4113635İzleyin
WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS
YüksekCVSS 8,8İstismar yokEPSS %0getshortcodes · shortcodes ultimate8 Kas 2022
- CVE-2023-091126İzleyin
Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure
OrtaCVSS 6,5İstismar yokEPSS %1getshortcodes · shortcodes ultimate20 Mar 2023
- CVE-2023-089026İzleyin
Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access
OrtaCVSS 6,5İstismar yokEPSS %1getshortcodes · shortcodes ultimate20 Mar 2023
- CVE-2023-2380026İzleyin
WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)
OrtaCVSS 6,5İstismar yokEPSS %0getshortcodes · shortcodes ultimate12 Kas 2023
- CVE-2024-318825İzleyin
Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS
OrtaCVSS 6,3İstismar yokEPSS %0getshortcodes · shortcodes ultimate26 Nis 2024
- CVE-2024-354824İzleyin
Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0getshortcodes · shortcodes ultimate15 May 2024
- CVE-2017-224521İzleyin
Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspeci
OrtaCVSS 5,0İstismar yokEPSS %3getshortcodes · shortcodes ultimate7 Tem 2017
- CVE-2021-2452521İzleyin
Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1getshortcodes · shortcodes ultimate20 Eyl 2021
- CVE-2024-355021İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1getshortcodes · shortcodes ultimate2 May 2024
- CVE-2023-622521İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate28 Kas 2023
- CVE-2024-151021İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate19 Şub 2024
- CVE-2023-648821İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate18 Ara 2023
- CVE-2024-079221İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate28 Şub 2024
- CVE-2023-2504021İzleyin
WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate30 Mar 2023
- CVE-2024-258321İzleyin
Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate13 Nis 2024
- CVE-2024-850021İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate23 Eki 2024
- CVE-2024-482121İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate5 Haz 2024
- CVE-2024-180821İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate28 Şub 2024
- CVE-2024-676621İzleyin
Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate6 Ağu 2024
- CVE-2024-455321İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate21 May 2024
- CVE-2025-556721İzleyin
Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute
OrtaCVSS 5,4İstismar yokEPSS %0getshortcodes · shortcodes ultimate3 Tem 2025
- CVE-2024-421718İzleyin
Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS
OrtaCVSS 4,7İstismar yokEPSS %0getshortcodes · shortcodes ultimate13 Tem 2024
- CVE-2023-622617İzleyin
WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure
OrtaCVSS 4,3İstismar yokEPSS %1getshortcodes · shortcodes ultimate28 Kas 2023
- CVE-2022-3808617İzleyin
WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0getshortcodes · shortcodes ultimate11 Eki 2022