JoomUnited kayıtları
joomunited üreticisine ait 22 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %22,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-862 Missing Authorization6
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-1230 Exposure of Sensitive Information Through Metadata1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
22 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2023-1381İstismar yok | WP Meta SEO < 4.5.5 - Author+ PHAR Deserializationjoomunited · wp meta seo · CWE-502 | Yüksek8,8 | — | %1,7 | 10 Nis 2023 |
35İzleyin | CVE-2023-0875İstismar yok | WP Meta SEO < 4.5.3 - Subscriber+ SQLijoomunited · wp meta seo · CWE-89 | Yüksek8,8 | — | %0,9 | 20 Mar 2023 |
35İzleyin | CVE-2024-25909İstismar yok | WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Uploadjoomunited · wp media folder · CWE-434 | Yüksek8,8 | — | %0,6 | 26 Şub 2024 |
28İzleyin | CVE-2025-5034İstismar yok | WP File Download < 6.2.6 - Reflected XSSjoomunited · wp file download · CWE-79 | Yüksek7,1 | — | %0,3 | 21 Haz 2025 |
26İzleyin | CVE-2024-13374İstismar yok | WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosurejoomunited · wp table manager · CWE-862 | Orta6,5 | — | %0,3 | 12 Şub 2025 |
24İzleyin | CVE-2016-10913İstismar yok | The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.joomunited · wp latest posts · CWE-79 | Orta6,1 | — | %0,9 | 20 Ağu 2019 |
24İzleyin | CVE-2023-0876Kavram kanıtı | WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirectjoomunited · wp meta seo · CWE-601 | Orta6,1 | — | %0,7 | 20 Mar 2023 |
24İzleyin | CVE-2023-6961İstismar yok | WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer headerjoomunited · wp meta seo · CWE-79 | Orta6,1 | — | %0,4 | 2 May 2024 |
24İzleyin | CVE-2024-22148İstismar yok | WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)joomunited · wp-smart-editor · CWE-79 | Orta6,1 | — | %0,4 | 1 Şub 2024 |
21İzleyin | CVE-2023-6962İstismar yok | WP Meta SEO <= 4.5.12 - Information Exposure via Meta Descriptionjoomunited · wp meta seo · CWE-1230 | Orta5,3 | — | %0,4 | 2 May 2024 |
21İzleyin | CVE-2022-47602İstismar yok | WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)joomunited · wp table manager · CWE-79 | Orta5,4 | — | %0,4 | 29 Mar 2023 |
21İzleyin | CVE-2024-45456İstismar yok | WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityjoomunited · wp meta seo · CWE-79 | Orta5,4 | — | %0,3 | 15 Eyl 2024 |
19İzleyin | CVE-2022-1093İstismar yok | WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbsjoomunited · wp meta seo · CWE-79 | Orta4,8 | — | %0,6 | 23 May 2022 |
19İzleyin | CVE-2024-45455İstismar yok | WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityjoomunited · wp meta seo · CWE-79 | Orta4,8 | — | %0,3 | 15 Eyl 2024 |
17İzleyin | CVE-2023-1026İstismar yok | WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'joomunited · wp meta seo · CWE-862 | Orta4,3 | — | %0,6 | 28 Şub 2023 |
17İzleyin | CVE-2023-1022İstismar yok | WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'joomunited · wp meta seo · CWE-862 | Orta4,3 | — | %0,6 | 28 Şub 2023 |
17İzleyin | CVE-2023-1024İstismar yok | WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'joomunited · wp meta seo · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2023 |
17İzleyin | CVE-2023-1023İstismar yok | WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'joomunited · wp meta seo · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2023 |
17İzleyin | CVE-2023-1027İstismar yok | WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'joomunited · wp meta seo · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2023 |
17İzleyin | CVE-2022-30337İstismar yok | WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerabilityjoomunited · wp meta seo · CWE-352 | Orta4,3 | — | %0,3 | 21 Tem 2022 |
17İzleyin | CVE-2023-1028İstismar yok | WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'joomunited · wp meta seo · CWE-352 | Orta4,3 | — | %0,3 | 28 Şub 2023 |
17İzleyin | CVE-2023-1029İstismar yok | WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'joomunited · wp meta seo · CWE-352 | Orta4,3 | — | %0,3 | 24 Şub 2023 |
- CVE-2023-138136İzleyin
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
YüksekCVSS 8,8İstismar yokEPSS %2joomunited · wp meta seo10 Nis 2023
- CVE-2023-087535İzleyin
WP Meta SEO < 4.5.3 - Subscriber+ SQLi
YüksekCVSS 8,8İstismar yokEPSS %1joomunited · wp meta seo20 Mar 2023
- CVE-2024-2590935İzleyin
WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1joomunited · wp media folder26 Şub 2024
- CVE-2025-503428İzleyin
WP File Download < 6.2.6 - Reflected XSS
YüksekCVSS 7,1İstismar yokEPSS %0joomunited · wp file download21 Haz 2025
- CVE-2024-1337426İzleyin
WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure
OrtaCVSS 6,5İstismar yokEPSS %0joomunited · wp table manager12 Şub 2025
- CVE-2016-1091324İzleyin
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
OrtaCVSS 6,1İstismar yokEPSS %1joomunited · wp latest posts20 Ağu 2019
- CVE-2023-087624İzleyin
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
OrtaCVSS 6,1Kavram kanıtıEPSS %1joomunited · wp meta seo20 Mar 2023
- CVE-2023-696124İzleyin
WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header
OrtaCVSS 6,1İstismar yokEPSS %0joomunited · wp meta seo2 May 2024
- CVE-2024-2214824İzleyin
WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0joomunited · wp-smart-editor1 Şub 2024
- CVE-2023-696221İzleyin
WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
OrtaCVSS 5,3İstismar yokEPSS %0joomunited · wp meta seo2 May 2024
- CVE-2022-4760221İzleyin
WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0joomunited · wp table manager29 Mar 2023
- CVE-2024-4545621İzleyin
WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0joomunited · wp meta seo15 Eyl 2024
- CVE-2022-109319İzleyin
WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
OrtaCVSS 4,8İstismar yokEPSS %1joomunited · wp meta seo23 May 2022
- CVE-2024-4545519İzleyin
WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0joomunited · wp meta seo15 Eyl 2024
- CVE-2023-102617İzleyin
WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'
OrtaCVSS 4,3İstismar yokEPSS %1joomunited · wp meta seo28 Şub 2023
- CVE-2023-102217İzleyin
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
OrtaCVSS 4,3İstismar yokEPSS %1joomunited · wp meta seo28 Şub 2023
- CVE-2023-102417İzleyin
WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'
OrtaCVSS 4,3İstismar yokEPSS %1joomunited · wp meta seo28 Şub 2023
- CVE-2023-102317İzleyin
WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'
OrtaCVSS 4,3İstismar yokEPSS %1joomunited · wp meta seo28 Şub 2023
- CVE-2023-102717İzleyin
WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
OrtaCVSS 4,3İstismar yokEPSS %0joomunited · wp meta seo28 Şub 2023
- CVE-2022-3033717İzleyin
WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0joomunited · wp meta seo21 Tem 2022
- CVE-2023-102817İzleyin
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'
OrtaCVSS 4,3İstismar yokEPSS %0joomunited · wp meta seo28 Şub 2023
- CVE-2023-102917İzleyin
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'
OrtaCVSS 4,3İstismar yokEPSS %0joomunited · wp meta seo24 Şub 2023