internet-formation kayıtları
internet-formation üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-9796Kavram kanıtı | WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injectioninternet-formation · wp-advanced-search · CWE-89 | Kritik9,8 | — | %3,0 | 10 Eki 2024 |
35İzleyin | CVE-2020-12104İstismar yok | The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql fiinternet-formation · wp-advanced-search · CWE-89 | Yüksek8,8 | — | %1,6 | 5 May 2020 |
35İzleyin | CVE-2022-47447Kavram kanıtı | WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)internet-formation · wp-advanced-search · CWE-352 | Yüksek8,8 | — | %0,3 | 24 May 2023 |
19İzleyin | CVE-2024-13851İstismar yok | Modal Portfolio <= 1.7.4.2 - Authenticated (Administrator+) Stored Cross-Site Scriptinginternet-formation · modal portfolio · CWE-79 | Orta4,8 | — | %0,2 | 28 Şub 2025 |
14İzleyin | CVE-2024-10554İstismar yok | WP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSSinternet-formation · wp-advanced-search · CWE-79 | Düşük3,5 | — | %0,3 | 25 Mar 2025 |
- CVE-2024-979640Planlayın
WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection
KritikCVSS 9,8Kavram kanıtıEPSS %3internet-formation · wp-advanced-search10 Eki 2024
- CVE-2020-1210435İzleyin
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql fi
YüksekCVSS 8,8İstismar yokEPSS %2internet-formation · wp-advanced-search5 May 2020
- CVE-2022-4744735İzleyin
WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8Kavram kanıtıEPSS %0internet-formation · wp-advanced-search24 May 2023
- CVE-2024-1385119İzleyin
Modal Portfolio <= 1.7.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0internet-formation · modal portfolio28 Şub 2025
- CVE-2024-1055414İzleyin
WP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSS
DüşükCVSS 3,5İstismar yokEPSS %0internet-formation · wp-advanced-search25 Mar 2025