goldplugins kayıtları
goldplugins üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2017-9418Kavram kanıtı | SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commandsgoldplugins · testimonials plugin easy testimonials · CWE-89 | Yüksek8,8 | — | %2,4 | 12 Haz 2017 |
24İzleyin | CVE-2018-19564İstismar yok | Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress.goldplugins · easy testimonials · CWE-79 | Orta6,1 | — | %0,9 | 26 Kas 2018 |
24İzleyin | CVE-2017-12131İstismar yok | The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonialgoldplugins · easy testimonials · CWE-79 | Orta6,1 | — | %0,8 | 1 Ağu 2017 |
24İzleyin | CVE-2024-8799İstismar yok | Custom Banners <= 3.3 - Reflected Cross-Site Scriptinggoldplugins · custom banners · CWE-79 | Orta6,1 | — | %0,3 | 1 Eki 2024 |
21İzleyin | CVE-2020-14959İstismar yok | Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script goldplugins · easy testimonials · CWE-79 | Orta5,4 | — | %0,9 | 21 Haz 2020 |
21İzleyin | CVE-2022-4577İstismar yok | Easy Testimonials < 3.9.3 - Contributor+ Stored XSSgoldplugins · easy testimonials · CWE-79 | Orta5,4 | — | %0,6 | 6 Şub 2023 |
21İzleyin | CVE-2023-41797İstismar yok | WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)goldplugins · locations · CWE-79 | Orta5,4 | — | %0,4 | 2 Eki 2023 |
21İzleyin | CVE-2024-2337İstismar yok | Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegoldplugins · easy testimonials · CWE-79 | Orta5,4 | — | %0,4 | 19 Tem 2024 |
17İzleyin | CVE-2020-36749İstismar yok | Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypassgoldplugins · easy testimonials · CWE-352 | Orta4,3 | — | %0,5 | 1 Tem 2023 |
17İzleyin | CVE-2021-4394İstismar yok | Locations <= 3.2.1 - Cross-Site Request Forgery Bypassgoldplugins · locations · CWE-352 | Orta4,3 | — | %0,5 | 1 Tem 2023 |
17İzleyin | CVE-2021-4397İstismar yok | Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypassgoldplugins · staff directory plugin · CWE-352 | Orta4,3 | — | %0,4 | 1 Tem 2023 |
17İzleyin | CVE-2021-4407İstismar yok | Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypassgoldplugins · custom banners · CWE-352 | Orta4,3 | — | %0,4 | 12 Tem 2023 |
- CVE-2017-941836İzleyin
SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands
YüksekCVSS 8,8Kavram kanıtıEPSS %2goldplugins · testimonials plugin easy testimonials12 Haz 2017
- CVE-2018-1956424İzleyin
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1goldplugins · easy testimonials26 Kas 2018
- CVE-2017-1213124İzleyin
The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonial
OrtaCVSS 6,1İstismar yokEPSS %1goldplugins · easy testimonials1 Ağu 2017
- CVE-2024-879924İzleyin
Custom Banners <= 3.3 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0goldplugins · custom banners1 Eki 2024
- CVE-2020-1495921İzleyin
Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script
OrtaCVSS 5,4İstismar yokEPSS %1goldplugins · easy testimonials21 Haz 2020
- CVE-2022-457721İzleyin
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1goldplugins · easy testimonials6 Şub 2023
- CVE-2023-4179721İzleyin
WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0goldplugins · locations2 Eki 2023
- CVE-2024-233721İzleyin
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0goldplugins · easy testimonials19 Tem 2024
- CVE-2020-3674917İzleyin
Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0goldplugins · easy testimonials1 Tem 2023
- CVE-2021-439417İzleyin
Locations <= 3.2.1 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0goldplugins · locations1 Tem 2023
- CVE-2021-439717İzleyin
Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0goldplugins · staff directory plugin1 Tem 2023
- CVE-2021-440717İzleyin
Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0goldplugins · custom banners12 Tem 2023