hmplugin kayıtları
hmplugin üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-269 Improper Privilege Management1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-29384Kavram kanıtı | WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Uploadhmplugin · jobwp · CWE-434 | Kritik9,8 | — | %1,4 | 20 Ara 2023 |
39İzleyin | CVE-2024-50459İstismar yok | WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerabilityhmplugin · aidwp · CWE-862 | Kritik9,8 | — | %0,4 | 29 Eki 2024 |
35İzleyin | CVE-2021-24602İstismar yok | HM Multiple Roles < 1.3 - Arbitrary Role Changehmplugin · hm multiple roles · CWE-269 | Yüksek8,8 | — | %1,5 | 23 Ağu 2021 |
35İzleyin | CVE-2022-47422İstismar yok | WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)hmplugin · accept stripe donation - aidwp · CWE-352 | Yüksek8,8 | — | %0,3 | 14 Mar 2023 |
35İzleyin | CVE-2023-23705İstismar yok | WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)hmplugin · wordpress books gallery · CWE-352 | Yüksek8,8 | — | %0,3 | 23 May 2023 |
30İzleyin | CVE-2023-48288İstismar yok | WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposurehmplugin · jobwp · CWE-200 | Yüksek7,5 | — | %0,5 | 21 Ara 2023 |
- CVE-2023-2938439İzleyin
WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %1hmplugin · jobwp20 Ara 2023
- CVE-2024-5045939İzleyin
WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0hmplugin · aidwp29 Eki 2024
- CVE-2021-2460235İzleyin
HM Multiple Roles < 1.3 - Arbitrary Role Change
YüksekCVSS 8,8İstismar yokEPSS %2hmplugin · hm multiple roles23 Ağu 2021
- CVE-2022-4742235İzleyin
WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0hmplugin · accept stripe donation - aidwp14 Mar 2023
- CVE-2023-2370535İzleyin
WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0hmplugin · wordpress books gallery23 May 2023
- CVE-2023-4828830İzleyin
WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1hmplugin · jobwp21 Ara 2023