kibokolabs kayıtları
kibokolabs üreticisine ait 65 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %35,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')50
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-502 Deserialization of Untrusted Data1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
65 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-18461İstismar yok | The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary kibokolabs · arigato autoresponder and newsletter · CWE-94 | Kritik9,8 | — | %4,1 | 18 Eki 2018 |
40Planlayın | CVE-2018-14502İstismar yok | controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrarkibokolabs · chained quiz · CWE-89 | Kritik9,8 | — | %2,6 | 10 Mar 2020 |
39İzleyin | CVE-2015-10111İstismar yok | Watu Quiz Plugin Exam exam.php watu_exams sql injectionkibokolabs · watu quiz · CWE-89 | Kritik9,8 | — | %0,7 | 4 Haz 2023 |
35İzleyin | CVE-2024-50408İstismar yok | WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerabilitykibokolabs · namaste\! lms · CWE-502 | Yüksek8,8 | — | %0,5 | 28 Eki 2024 |
35İzleyin | CVE-2024-53792İstismar yok | WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerabilitykibokolabs · watu quiz · CWE-89 | Yüksek8,8 | — | %0,4 | 2 Ara 2024 |
35İzleyin | CVE-2023-47686İstismar yok | WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)kibokolabs · arigato autoresponder and newsletter · CWE-352 | Yüksek8,8 | — | %0,2 | 16 Kas 2023 |
29İzleyin | CVE-2018-1002000Kavram kanıtı | There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privilekibokolabs · arigato autoresponder and newsletter · CWE-89 | Yüksek7,2 | — | %4,3 | 3 Ara 2018 |
24İzleyin | CVE-2020-7104İstismar yok | The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.kibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %1,6 | 17 Oca 2020 |
24İzleyin | CVE-2023-0968Kavram kanıtı | Watu Quiz <= 3.3.9 - Reflected Cross-Site Scriptingkibokolabs · watu quiz · CWE-79 | Orta6,1 | — | %1,2 | 3 Mar 2023 |
24İzleyin | CVE-2019-12345İstismar yok | XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.kibokolabs · hostel · CWE-79 | Orta6,1 | — | %1,1 | 27 May 2019 |
24İzleyin | CVE-2022-4215İstismar yok | Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via datekibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,9 | 2 Ara 2022 |
24İzleyin | CVE-2016-10892İstismar yok | The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.kibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,9 | 20 Ağu 2019 |
24İzleyin | CVE-2021-38317İstismar yok | Konnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scriptingkibokolabs · konnichiwa · CWE-79 | Orta6,1 | — | %0,8 | 9 Eyl 2021 |
24İzleyin | CVE-2022-4211İstismar yok | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailfkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2022-4212İstismar yok | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipfkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2022-4209İstismar yok | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsfkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2022-4210İstismar yok | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnfkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2022-4208İstismar yok | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datefkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2022-4214İstismar yok | Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ipkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,8 | 2 Ara 2022 |
24İzleyin | CVE-2021-38358İstismar yok | MoolaMojo <= 0.7.4.1 Reflected Cross-Site Scriptingkibokolabs · moolamojo · CWE-79 | Orta6,1 | — | %0,7 | 10 Eyl 2021 |
24İzleyin | CVE-2022-4213İstismar yok | Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dnkibokolabs · chained quiz · CWE-79 | Orta6,1 | — | %0,6 | 2 Ara 2022 |
24İzleyin | CVE-2023-4602İstismar yok | Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scriptingkibokolabs · namaste\! lms · CWE-79 | Orta6,1 | — | %0,6 | 15 Kas 2023 |
24İzleyin | CVE-2023-0428İstismar yok | Watu Quiz < 3.3.8.2 - Reflected XSSkibokolabs · watu quiz · CWE-79 | Orta6,1 | — | %0,6 | 21 Şub 2023 |
24İzleyin | CVE-2023-25020İstismar yok | WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)kibokolabs · arigato autoresponder and newsletter · CWE-79 | Orta6,1 | — | %0,4 | 7 Nis 2023 |
24İzleyin | CVE-2025-30844İstismar yok | WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerabilitykibokolabs · watu quiz · CWE-79 | Orta6,1 | — | %0,4 | 1 Nis 2025 |
- CVE-2018-1846140Planlayın
The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary
KritikCVSS 9,8İstismar yokEPSS %4kibokolabs · arigato autoresponder and newsletter18 Eki 2018
- CVE-2018-1450240Planlayın
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrar
KritikCVSS 9,8İstismar yokEPSS %2kibokolabs · chained quiz10 Mar 2020
- CVE-2015-1011139İzleyin
Watu Quiz Plugin Exam exam.php watu_exams sql injection
KritikCVSS 9,8İstismar yokEPSS %0kibokolabs · watu quiz4 Haz 2023
- CVE-2024-5040835İzleyin
WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0kibokolabs · namaste\! lms28 Eki 2024
- CVE-2024-5379235İzleyin
WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0kibokolabs · watu quiz2 Ara 2024
- CVE-2023-4768635İzleyin
WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0kibokolabs · arigato autoresponder and newsletter16 Kas 2023
- CVE-2018-100200029İzleyin
There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privile
YüksekCVSS 7,2Kavram kanıtıEPSS %4kibokolabs · arigato autoresponder and newsletter3 Ara 2018
- CVE-2020-710424İzleyin
The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.
OrtaCVSS 6,1İstismar yokEPSS %1kibokolabs · chained quiz17 Oca 2020
- CVE-2023-096824İzleyin
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1kibokolabs · watu quiz3 Mar 2023
- CVE-2019-1234524İzleyin
XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1kibokolabs · hostel27 May 2019
- CVE-2022-421524İzleyin
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2016-1089224İzleyin
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz20 Ağu 2019
- CVE-2021-3831724İzleyin
Konnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · konnichiwa9 Eyl 2021
- CVE-2022-421124İzleyin
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2022-421224İzleyin
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2022-420924İzleyin
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2022-421024İzleyin
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2022-420824İzleyin
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2022-421424İzleyin
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2021-3835824İzleyin
MoolaMojo <= 0.7.4.1 Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · moolamojo10 Eyl 2021
- CVE-2022-421324İzleyin
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · chained quiz2 Ara 2022
- CVE-2023-460224İzleyin
Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · namaste\! lms15 Kas 2023
- CVE-2023-042824İzleyin
Watu Quiz < 3.3.8.2 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · watu quiz21 Şub 2023
- CVE-2023-2502024İzleyin
WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · arigato autoresponder and newsletter7 Nis 2023
- CVE-2025-3084424İzleyin
WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0kibokolabs · watu quiz1 Nis 2025