myCred kayıtları
mycred üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-502 Deserialization of Untrusted Data1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-43354İstismar yok | WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerabilitysaad iqbal · mycred · CWE-502 | Kritik9,8 | — | %0,5 | 19 Ağu 2024 |
24İzleyin | CVE-2017-20008İstismar yok | myCRED < 1.7.8 - Reflected Cross-Site Scriptingmycred · mycred · CWE-79 | Orta6,1 | — | %0,9 | 29 Kas 2021 |
24İzleyin | CVE-2021-25015İstismar yok | myCred < 2.4 - Reflected Cross-Site Scriptingmycred · mycred · CWE-79 | Orta6,1 | — | %0,8 | 24 Oca 2022 |
21İzleyin | CVE-2024-8658İstismar yok | myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits fomycred · mycred · CWE-862 | Orta5,3 | — | %0,3 | 25 Eyl 2024 |
21İzleyin | CVE-2024-10187İstismar yok | myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcodemycred · mycred · CWE-79 | Orta5,4 | — | %0,3 | 8 Kas 2024 |
21İzleyin | CVE-2024-49702İstismar yok | WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitymycred · mycred elementor · CWE-79 | Orta5,4 | — | %0,2 | 24 Eki 2024 |
- CVE-2024-4335439İzleyin
WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0saad iqbal · mycred19 Ağu 2024
- CVE-2017-2000824İzleyin
myCRED < 1.7.8 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0mycred · mycred29 Kas 2021
- CVE-2021-2501524İzleyin
myCred < 2.4 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0mycred · mycred24 Oca 2022
- CVE-2024-865821İzleyin
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits fo
OrtaCVSS 5,3İstismar yokEPSS %0mycred · mycred25 Eyl 2024
- CVE-2024-1018721İzleyin
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0mycred · mycred8 Kas 2024
- CVE-2024-4970221İzleyin
WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0mycred · mycred elementor24 Eki 2024