IdeaBox kayıtları
ideabox üreticisine ait 19 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %31,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-269 Improper Privilege Management2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
19 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-39634İstismar yok | WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerabilityideabox · powerpack pro for elementor · CWE-269 | Yüksek8,8 | — | %0,4 | 1 Ağu 2024 |
35İzleyin | CVE-2024-3668İstismar yok | PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalationideabox · powerpack addons for elementor · CWE-732 | Yüksek8,8 | — | %0,4 | 8 Haz 2024 |
35İzleyin | CVE-2024-39633İstismar yok | WordPress PowerPack for Beaver Builder plugin <= 2.33.0 - Contributor+ Privilege Escalation vulnerabilityideabox · powerpack for beaver builder · CWE-269 | Yüksek8,8 | — | %0,4 | 1 Ağu 2024 |
28İzleyin | CVE-2024-37410İstismar yok | WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerabilityideabox · powerpack for beaver builder · CWE-98 | Yüksek7,2 | — | %0,6 | 9 Tem 2024 |
24İzleyin | CVE-2021-25027İstismar yok | PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scriptingideabox · powerpack addons for elementor · CWE-79 | Orta6,1 | — | %0,9 | 3 Oca 2022 |
24İzleyin | CVE-2022-0176İstismar yok | PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scriptingideabox · powerpack for beaver builder · CWE-79 | Orta6,1 | — | %0,9 | 14 Şub 2022 |
24İzleyin | CVE-2023-49739İstismar yok | WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerabilityideabox · powerpack addons for elementor | Orta6,1 | — | %0,4 | 14 Ara 2023 |
24İzleyin | CVE-2024-12239İstismar yok | PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameterideabox · powerpack for beaver builder · CWE-79 | Orta6,1 | — | %0,4 | 16 Ara 2024 |
24İzleyin | CVE-2024-43330İstismar yok | WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerabilityideabox · powerpack for beaver builder · CWE-79 | Orta6,1 | — | %0,3 | 18 Ağu 2024 |
21İzleyin | CVE-2021-24263İstismar yok | PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSSideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,7 | 5 May 2021 |
21İzleyin | CVE-2024-1411İstismar yok | PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widgetideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,4 | 28 Şub 2024 |
21İzleyin | CVE-2024-1055İstismar yok | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,4 | 7 Şub 2024 |
21İzleyin | CVE-2024-5787İstismar yok | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Wiideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,4 | 13 Haz 2024 |
21İzleyin | CVE-2024-2492İstismar yok | PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widgetideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,4 | 9 Nis 2024 |
21İzleyin | CVE-2024-2491İstismar yok | PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*ideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,3 | 30 Mar 2024 |
21İzleyin | CVE-2024-2289İstismar yok | PowerPack Lite for Beaver Builder <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via element linkideabox · powerpack for beaver builder · CWE-79 | Orta5,4 | — | %0,3 | 9 Nis 2024 |
21İzleyin | CVE-2024-5327İstismar yok | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingideabox · powerpack addons for elementor · CWE-79 | Orta5,4 | — | %0,3 | 30 May 2024 |
21İzleyin | CVE-2024-37409İstismar yok | WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerabilityideabox · powerpack for beaver builder · CWE-79 | Orta5,4 | — | %0,3 | 22 Tem 2024 |
17İzleyin | CVE-2023-6984İstismar yok | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgeryideabox · powerpack addons for elementor · CWE-352 | Orta4,3 | — | %0,2 | 3 Oca 2024 |
- CVE-2024-3963435İzleyin
WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0ideabox · powerpack pro for elementor1 Ağu 2024
- CVE-2024-366835İzleyin
PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0ideabox · powerpack addons for elementor8 Haz 2024
- CVE-2024-3963335İzleyin
WordPress PowerPack for Beaver Builder plugin <= 2.33.0 - Contributor+ Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0ideabox · powerpack for beaver builder1 Ağu 2024
- CVE-2024-3741028İzleyin
WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1ideabox · powerpack for beaver builder9 Tem 2024
- CVE-2021-2502724İzleyin
PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1ideabox · powerpack addons for elementor3 Oca 2022
- CVE-2022-017624İzleyin
PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1ideabox · powerpack for beaver builder14 Şub 2022
- CVE-2023-4973924İzleyin
WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0ideabox · powerpack addons for elementor14 Ara 2023
- CVE-2024-1223924İzleyin
PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter
OrtaCVSS 6,1İstismar yokEPSS %0ideabox · powerpack for beaver builder16 Ara 2024
- CVE-2024-4333024İzleyin
WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0ideabox · powerpack for beaver builder18 Ağu 2024
- CVE-2021-2426321İzleyin
PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1ideabox · powerpack addons for elementor5 May 2021
- CVE-2024-141121İzleyin
PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor28 Şub 2024
- CVE-2024-105521İzleyin
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor7 Şub 2024
- CVE-2024-578721İzleyin
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Wi
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor13 Haz 2024
- CVE-2024-249221İzleyin
PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor9 Nis 2024
- CVE-2024-249121İzleyin
PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor30 Mar 2024
- CVE-2024-228921İzleyin
PowerPack Lite for Beaver Builder <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via element link
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack for beaver builder9 Nis 2024
- CVE-2024-532721İzleyin
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack addons for elementor30 May 2024
- CVE-2024-3740921İzleyin
WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0ideabox · powerpack for beaver builder22 Tem 2024
- CVE-2023-698417İzleyin
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery
OrtaCVSS 4,3İstismar yokEPSS %0ideabox · powerpack addons for elementor3 Oca 2024