kraftplugins kayıtları
kraftplugins üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %57,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-862 Missing Authorization2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-47311İstismar yok | WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerabilitykraftplugins · wheel of life · CWE-862 | Kritik9,8 | — | %0,4 | 1 Kas 2024 |
21İzleyin | CVE-2024-3627İstismar yok | Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpointskraftplugins · wheel of life · CWE-862 | Orta5,4 | — | %0,4 | 19 Haz 2024 |
21İzleyin | CVE-2024-4702İstismar yok | Mega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widgetkraftplugins · mega elements · CWE-79 | Orta5,4 | — | %0,3 | 15 May 2024 |
21İzleyin | CVE-2024-9172İstismar yok | Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadkraftplugins · demo importer plus · CWE-79 | Orta5,4 | — | %0,3 | 2 Eki 2024 |
21İzleyin | CVE-2024-32575İstismar yok | WordPress Mega Elements plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilitykraftplugins · mega elements · CWE-79 | Orta5,4 | — | %0,3 | 18 Nis 2024 |
21İzleyin | CVE-2024-37466İstismar yok | WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerabilitykraftplugins · mega elements · CWE-79 | Orta5,4 | — | %0,3 | 21 Tem 2024 |
21İzleyin | CVE-2024-49693İstismar yok | WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitykraftplugins · mega elements · CWE-79 | Orta5,4 | — | %0,3 | 24 Eki 2024 |
- CVE-2024-4731139İzleyin
WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0kraftplugins · wheel of life1 Kas 2024
- CVE-2024-362721İzleyin
Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · wheel of life19 Haz 2024
- CVE-2024-470221İzleyin
Mega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · mega elements15 May 2024
- CVE-2024-917221İzleyin
Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · demo importer plus2 Eki 2024
- CVE-2024-3257521İzleyin
WordPress Mega Elements plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · mega elements18 Nis 2024
- CVE-2024-3746621İzleyin
WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · mega elements21 Tem 2024
- CVE-2024-4969321İzleyin
WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0kraftplugins · mega elements24 Eki 2024