KaineLabs kayıtları
kainelabs üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %23,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2022-1950Kavram kanıtı | Youzify < 1.2.0 - Unauthenticated SQLikainelabs · youzify · CWE-89 | Kritik9,8 | — | %5,8 | 1 Ağu 2022 |
35İzleyin | CVE-2024-37494İstismar yok | WordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerabilitykainelabs · youzify · CWE-89 | Yüksek8,8 | — | %0,4 | 9 Tem 2024 |
35İzleyin | CVE-2024-39635İstismar yok | WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerabilitykainelabs · youzify · CWE-862 | Yüksek8,8 | — | %0,4 | 1 Kas 2024 |
26İzleyin | CVE-2024-4742İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injectionkainelabs · youzify · CWE-89 | Orta6,5 | — | %0,5 | 19 Haz 2024 |
26İzleyin | CVE-2023-47191İstismar yok | WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)kainelabs · youzify · CWE-639 | Orta6,5 | — | %0,4 | 21 Ara 2023 |
26İzleyin | CVE-2024-13370İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Lkainelabs · youzify · CWE-862 | Orta6,5 | — | %0,4 | 25 Oca 2025 |
24İzleyin | CVE-2024-2864İstismar yok | WordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerabilitykainelabs · youzify · CWE-79 | Orta6,1 | — | %0,3 | 25 Mar 2024 |
21İzleyin | CVE-2021-24443İstismar yok | Youzify < 1.0.7 - Stored Cross-Site Scripting via Biographykainelabs · youzify · CWE-79 | Orta5,4 | — | %0,6 | 2 Ağu 2021 |
21İzleyin | CVE-2023-0059İstismar yok | Youzify < 1.2.2 - Contributor+ Stored XSSkainelabs · youzify · CWE-79 | Orta5,4 | — | %0,4 | 21 Şub 2023 |
21İzleyin | CVE-2024-8987İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scriptikainelabs · youzify · CWE-79 | Orta5,4 | — | %0,3 | 9 Eki 2024 |
17İzleyin | CVE-2024-13368İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Lkainelabs · youzify · CWE-862 | Orta4,3 | — | %0,3 | 25 Oca 2025 |
17İzleyin | CVE-2024-12113İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Skainelabs · youzify · CWE-862 | Orta4,3 | — | %0,3 | 25 Oca 2025 |
17İzleyin | CVE-2024-9067İstismar yok | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attackainelabs · youzify · CWE-862 | Orta4,3 | — | %0,3 | 9 Eki 2024 |
- CVE-2022-195041Planlayın
Youzify < 1.2.0 - Unauthenticated SQLi
KritikCVSS 9,8Kavram kanıtıEPSS %5kainelabs · youzify1 Ağu 2022
- CVE-2024-3749435İzleyin
WordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0kainelabs · youzify9 Tem 2024
- CVE-2024-3963535İzleyin
WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0kainelabs · youzify1 Kas 2024
- CVE-2024-474226İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0kainelabs · youzify19 Haz 2024
- CVE-2023-4719126İzleyin
WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)
OrtaCVSS 6,5İstismar yokEPSS %0kainelabs · youzify21 Ara 2023
- CVE-2024-1337026İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) L
OrtaCVSS 6,5İstismar yokEPSS %0kainelabs · youzify25 Oca 2025
- CVE-2024-286424İzleyin
WordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0kainelabs · youzify25 Mar 2024
- CVE-2021-2444321İzleyin
Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography
OrtaCVSS 5,4İstismar yokEPSS %0kainelabs · youzify2 Ağu 2021
- CVE-2023-005921İzleyin
Youzify < 1.2.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0kainelabs · youzify21 Şub 2023
- CVE-2024-898721İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripti
OrtaCVSS 5,4İstismar yokEPSS %0kainelabs · youzify9 Eki 2024
- CVE-2024-1336817İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) L
OrtaCVSS 4,3İstismar yokEPSS %0kainelabs · youzify25 Oca 2025
- CVE-2024-1211317İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (S
OrtaCVSS 4,3İstismar yokEPSS %0kainelabs · youzify25 Oca 2025
- CVE-2024-906717İzleyin
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attac
OrtaCVSS 4,3İstismar yokEPSS %0kainelabs · youzify9 Eki 2024