İçeriğe atla
Noroxi

incsub kayıtları

incsub üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%22,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2023-4596
    43Planlayın

    Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    incsub · forminator29 Ağu 2023

  • CVE-2025-6463
    39İzleyin

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submiss

    YüksekCVSS 8,8İstismar yokEPSS %13

    incsub · forminator2 Tem 2025

  • CVE-2023-1478
    39İzleyin

    Hummingbird < 3.4.2 - Unauthenticated Path Traversal

    KritikCVSS 9,8İstismar yokEPSS %1

    incsub · hummingbird10 Nis 2023

  • CVE-2024-31077
    37İzleyin

    Forminator prior to 1.29.3 contains a SQL injection vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %30

    incsub · forminator23 Nis 2024

  • CVE-2019-11872
    36İzleyin

    The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a

    YüksekCVSS 8,8İstismar yokEPSS %2

    incsub · hustle29 May 2019

  • CVE-2024-43118
    35İzleyin

    WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    incsub · hummingbird1 Kas 2024

  • CVE-2025-6464
    35İzleyin

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Sub

    YüksekCVSS 8,8İstismar yokEPSS %1

    incsub · forminator2 Tem 2025

  • CVE-2015-9455
    32İzleyin

    The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php b

    YüksekCVSS 8,1İstismar yokEPSS %1

    incsub · buddypress-activity-plus7 Eki 2019

  • CVE-2024-7389
    30İzleyin

    Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure

    YüksekCVSS 7,5İstismar yokEPSS %1

    incsub · forminator2 Ağu 2024

  • CVE-2019-9568
    26İzleyin

    The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=formina

    OrtaCVSS 6,5İstismar yokEPSS %2

    incsub · forminator4 Mar 2019

  • CVE-2023-3134
    25İzleyin

    Forminator < 1.24.4 - Reflected XSS

    OrtaCVSS 6,1İstismar yokEPSS %4

    incsub · forminator31 Tem 2023

  • CVE-2019-9567
    24İzleyin

    The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.

    OrtaCVSS 6,1İstismar yokEPSS %1

    incsub · forminator4 Mar 2019

  • CVE-2024-1794
    24İzleyin

    Forminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File Upload

    OrtaCVSS 6,1İstismar yokEPSS %1

    incsub · forminator9 Nis 2024

  • CVE-2024-45625
    24İzleyin

    Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1.

    OrtaCVSS 6,1İstismar yokEPSS %0

    incsub · forminator9 Eyl 2024

  • CVE-2024-29777
    24İzleyin

    WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    incsub · forminator27 Mar 2024

  • CVE-2021-36821
    24İzleyin

    WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    incsub · forminator16 Mar 2023

  • CVE-2018-18576
    21İzleyin

    The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/a

    OrtaCVSS 5,3İstismar yokEPSS %1

    incsub · hustle17 Mar 2020

  • CVE-2024-28890
    21İzleyin

    Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability.

    OrtaCVSS 5,3İstismar yokEPSS %1

    incsub · forminator23 Nis 2024

  • CVE-2024-31857
    21İzleyin

    Forminator prior to 1.15.4 contains a cross-site scripting vulnerability.

    OrtaCVSS 5,4İstismar yokEPSS %1

    incsub · forminator23 Nis 2024

  • CVE-2024-3053
    21İzleyin

    Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.29.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via forminator_form Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    incsub · forminator9 Nis 2024

  • CVE-2024-32792
    21İzleyin

    WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    incsub · hummingbird9 Haz 2024

  • CVE-2022-0994
    20İzleyin

    Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %3

    incsub · hummingbird18 Nis 2022

  • CVE-2023-6133
    19İzleyin

    Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload

    OrtaCVSS 4,9İstismar yokEPSS %1

    incsub · forminator15 Kas 2023

  • CVE-2021-24700
    19İzleyin

    Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    incsub · forminator23 Kas 2021

  • CVE-2023-5119
    19İzleyin

    Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    incsub · forminator20 Kas 2023