İçeriğe atla
Noroxi

MainWP kayıtları

mainwp üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%63,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2023-23656
    40Planlayın

    WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    mainwp · mainwp file uploader extension26 Mar 2024

  • CVE-2023-23645
    39İzleyin

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %1

    mainwp · code snippets extension17 May 2024

  • CVE-2023-23660
    35İzleyin

    WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    mainwp · mainwp maintenance extension18 Tem 2023

  • CVE-2023-23651
    35İzleyin

    WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    mainwp · mainwp google analytics extension12 Eki 2023

  • CVE-2024-7492
    35İzleyin

    MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

    YüksekCVSS 8,8İstismar yokEPSS %0

    mainwp · mainwp child7 Ağu 2024

  • CVE-2023-23639
    35İzleyin

    WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    mainwp · staging extension9 Haz 2024

  • CVE-2023-23640
    35İzleyin

    WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    mainwp · updraftplus extension9 Haz 2024

  • CVE-2023-23659
    35İzleyin

    WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    mainwp · motomo23 Şub 2023

  • CVE-2023-23649
    32İzleyin

    WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %1

    mainwp · mainwp links manager extension28 Mar 2024

  • CVE-2023-3132
    30İzleyin

    MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files

    YüksekCVSS 7,5İstismar yokEPSS %1

    mainwp · mainwp child26 Haz 2023

  • CVE-2021-24754
    28İzleyin

    MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    mainwp · mainwp child reports18 Eki 2021

  • CVE-2021-24877
    28İzleyin

    MainWP Child < 4.1.8 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    mainwp · mainwp child23 Kas 2021

  • CVE-2016-15041
    24İzleyin

    MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    mainwp · mainwp dashboard16 Eki 2024

  • CVE-2023-23650
    21İzleyin

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    mainwp · code snippets extension23 Mar 2023

  • CVE-2023-22699
    21İzleyin

    WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    mainwp · mainwp wordfence extension25 Mar 2024

  • CVE-2024-33680
    21İzleyin

    WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    mainwp · mainwp child reports26 Nis 2024

  • CVE-2023-38519
    19İzleyin

    WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

    OrtaCVSS 4,9İstismar yokEPSS %1

    mainwp · mainwp dashboard20 Ara 2023

  • CVE-2023-6164
    19İzleyin

    MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection

    OrtaCVSS 4,8İstismar yokEPSS %0

    mainwp · mainwp22 Kas 2023

  • CVE-2024-1642
    17İzleyin

    MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

    OrtaCVSS 4,3İstismar yokEPSS %0

    mainwp · mainwp dashboard13 Mar 2024