Never5 kayıtları

never5 üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
24İzleyin	CVE-2015-9361İstismar yok	The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().never5 · related posts · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,0	28 Ağu 2019
24İzleyin	CVE-2015-9362İstismar yok	The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().never5 · post connector · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	28 Ağu 2019
24İzleyin	CVE-2015-9296İstismar yok	The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.never5 · download monitor · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	13 Ağu 2019
21İzleyin	CVE-2022-3506Kavram kanıtı	Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wpnever5 · related posts · CWE-79 XSS	Orta5,4	—	%1,2	14 Eki 2022
21İzleyin	CVE-2021-24180İstismar yok	Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)never5 · related posts · CWE-79 XSS	Orta5,4	—	%0,6	5 Nis 2021
21İzleyin	CVE-2024-0592İstismar yok	Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgerynever5 · related posts · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,3	13 Mar 2024
19İzleyin	CVE-2021-24482İstismar yok	Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFSnever5 · related posts · CWE-79 XSS	Orta4,8	—	%0,7	19 Tem 2021
19İzleyin	CVE-2023-28931İstismar yok	WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)never5 · post connector · CWE-79 XSS	Orta4,8	—	%0,4	8 Ağu 2023

CVE-2015-9361
24İzleyin
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
never5 · related posts28 Ağu 2019
CVE-2015-9362
24İzleyin
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
never5 · post connector28 Ağu 2019
CVE-2015-9296
24İzleyin
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
never5 · download monitor13 Ağu 2019
CVE-2022-3506
21İzleyin
Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- XSS
never5 · related posts14 Eki 2022
CVE-2021-24180
21İzleyin
Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
never5 · related posts5 Nis 2021
CVE-2024-0592
21İzleyin
Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
never5 · related posts13 Mar 2024
CVE-2021-24482
19İzleyin
Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
never5 · related posts19 Tem 2021
CVE-2023-28931
19İzleyin
WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
never5 · post connector8 Ağu 2023