LWS kayıtları
lws üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2023-32297İstismar yok | WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerabilitylws · lws affiliation · CWE-22 | Kritik9,0 | — | %0,8 | 17 May 2024 |
35İzleyin | CVE-2024-43962İstismar yok | WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerabilitylws · affiliation · CWE-862 | Yüksek8,8 | — | %0,5 | 1 Kas 2024 |
35İzleyin | CVE-2023-27453İstismar yok | WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)lws · lws tools · CWE-352 | Yüksek8,8 | — | %0,3 | 22 Kas 2023 |
35İzleyin | CVE-2023-34025İstismar yok | WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)lws · lws hide login · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-35774İstismar yok | WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)lws · lws tools · CWE-352 | Yüksek8,8 | — | %0,2 | 11 Tem 2023 |
35İzleyin | CVE-2023-35781İstismar yok | WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)lws · lws cleaner · CWE-352 | Yüksek8,8 | — | %0,2 | 11 Tem 2023 |
- CVE-2023-3229736İzleyin
WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerability
KritikCVSS 9,0İstismar yokEPSS %1lws · lws affiliation17 May 2024
- CVE-2024-4396235İzleyin
WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0lws · affiliation1 Kas 2024
- CVE-2023-2745335İzleyin
WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0lws · lws tools22 Kas 2023
- CVE-2023-3402535İzleyin
WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0lws · lws hide login9 Kas 2023
- CVE-2023-3577435İzleyin
WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0lws · lws tools11 Tem 2023
- CVE-2023-3578135İzleyin
WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0lws · lws cleaner11 Tem 2023