İçeriğe atla
Noroxi

maxfoundry kayıtları

maxfoundry üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%34,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2024-30486
    35İzleyin

    WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    maxfoundry · media library folders29 Mar 2024

  • CVE-2022-36346
    35İzleyin

    WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    maxfoundry · maxbuttons22 Ağu 2022

  • CVE-2022-41634
    35İzleyin

    WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    maxfoundry · media library folders18 Kas 2022

  • CVE-2024-31287
    26İzleyin

    WordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %1

    maxfoundry · media library folders10 Nis 2024

  • CVE-2024-7857
    26İzleyin

    Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %0

    maxfoundry · media library folders28 Ağu 2024

  • CVE-2024-7858
    25İzleyin

    Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions

    OrtaCVSS 6,3İstismar yokEPSS %0

    maxfoundry · media library folders30 Ağu 2024

  • CVE-2014-125092
    24İzleyin

    MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    maxfoundry · maxbuttons5 Mar 2023

  • CVE-2024-9219
    24İzleyin

    WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    maxfoundry · social share buttons19 Eki 2024

  • CVE-2024-3615
    24İzleyin

    Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'

    OrtaCVSS 6,1İstismar yokEPSS %0

    maxfoundry · media library folders18 Nis 2024

  • CVE-2024-3026
    21İzleyin

    WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    maxfoundry · maxbuttons13 Tem 2024

  • CVE-2024-6499
    21İzleyin

    WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %0

    maxfoundry · maxbuttons24 Ağu 2024

  • CVE-2023-7029
    21İzleyin

    WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    maxfoundry · maxbuttons5 Şub 2024

  • CVE-2023-36503
    21İzleyin

    WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    maxfoundry · maxbuttons25 Tem 2023

  • CVE-2021-4222
    19İzleyin

    WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    maxfoundry · wp-paginate28 Şub 2022

  • CVE-2022-2050
    19İzleyin

    WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    maxfoundry · wp-paginate11 Tem 2022

  • CVE-2022-25603
    19İzleyin

    WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 4,8İstismar yokEPSS %1

    maxfoundry · maxgalleria18 Mar 2022

  • CVE-2022-38703
    19İzleyin

    WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 4,8İstismar yokEPSS %1

    maxfoundry · maxbuttons23 Eyl 2022

  • CVE-2024-10555
    19İzleyin

    MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width

    OrtaCVSS 4,8İstismar yokEPSS %0

    maxfoundry · maxbuttons20 Ara 2024

  • CVE-2023-6594
    19İzleyin

    WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    maxfoundry · maxbuttons8 Oca 2024

  • CVE-2014-7181
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject

    OrtaCVSS 4,3İstismar yokEPSS %2

    maxfoundry · maxbuttons16 Eki 2014

  • CVE-2024-8968
    18İzleyin

    MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color

    OrtaCVSS 4,7İstismar yokEPSS %0

    maxfoundry · maxbuttons20 Ara 2024

  • CVE-2024-3581
    17İzleyin

    MaxGalleria <= 6.4.2 - Missing Authorization

    OrtaCVSS 4,3İstismar yokEPSS %1

    maxfoundry · maxgalleria2 May 2024

  • CVE-2025-0935
    17İzleyin

    Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change

    OrtaCVSS 4,3İstismar yokEPSS %0

    maxfoundry · media library folders15 Şub 2025