newstatpress project kayıtları
newstatpress project üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %10
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2015-9313İstismar yok | The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.newstatpress project · newstatpress · CWE-89 | Kritik9,8 | — | %1,8 | 14 Ağu 2019 |
40Planlayın | CVE-2015-9315İstismar yok | The newstatpress plugin before 1.0.1 for WordPress has SQL injection.newstatpress project · newstatpress · CWE-89 | Kritik9,8 | — | %1,8 | 14 Ağu 2019 |
29İzleyin | CVE-2015-4062Kavram kanıtı | SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated usenewstatpress project · newstatpress · CWE-89 | Orta6,5 | — | %9,2 | 27 May 2015 |
25İzleyin | CVE-2015-9312Kavram kanıtı | The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.newstatpress project · newstatpress · CWE-79 | Orta6,1 | — | %1,8 | 14 Ağu 2019 |
24İzleyin | CVE-2022-0206Kavram kanıtı | NewStatPress < 1.3.6 - Reflected Cross-Site Scriptingnewstatpress project · newstatpress · CWE-79 | Orta6,1 | — | %1,4 | 14 Şub 2022 |
24İzleyin | CVE-2015-9314İstismar yok | The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.newstatpress project · newstatpress · CWE-79 | Orta6,1 | — | %0,9 | 14 Ağu 2019 |
24İzleyin | CVE-2015-9311İstismar yok | The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.newstatpress project · newstatpress · CWE-79 | Orta6,1 | — | %0,9 | 14 Ağu 2019 |
24İzleyin | CVE-2017-18575İstismar yok | The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.newstatpress project · newstatpress · CWE-79 | Orta6,1 | — | %0,9 | 22 Ağu 2019 |
21İzleyin | CVE-2017-20094İstismar yok | NewStatPress Plugin Persistent cross site scritingnewstatpress project · newstatpress · CWE-80 | Orta5,4 | — | %0,5 | 24 Haz 2022 |
16İzleyin | CVE-2015-4063Kavram kanıtı | Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authnewstatpress project · newstatpress · CWE-79 | Düşük3,5 | — | %6,0 | 27 May 2015 |
- CVE-2015-931340Planlayın
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
KritikCVSS 9,8İstismar yokEPSS %1newstatpress project · newstatpress14 Ağu 2019
- CVE-2015-931540Planlayın
The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
KritikCVSS 9,8İstismar yokEPSS %1newstatpress project · newstatpress14 Ağu 2019
- CVE-2015-406229İzleyin
SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated use
OrtaCVSS 6,5Kavram kanıtıEPSS %9newstatpress project · newstatpress27 May 2015
- CVE-2015-931225İzleyin
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
OrtaCVSS 6,1Kavram kanıtıEPSS %1newstatpress project · newstatpress14 Ağu 2019
- CVE-2022-020624İzleyin
NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1newstatpress project · newstatpress14 Şub 2022
- CVE-2015-931424İzleyin
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
OrtaCVSS 6,1İstismar yokEPSS %0newstatpress project · newstatpress14 Ağu 2019
- CVE-2015-931124İzleyin
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
OrtaCVSS 6,1İstismar yokEPSS %0newstatpress project · newstatpress14 Ağu 2019
- CVE-2017-1857524İzleyin
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
OrtaCVSS 6,1İstismar yokEPSS %0newstatpress project · newstatpress22 Ağu 2019
- CVE-2017-2009421İzleyin
NewStatPress Plugin Persistent cross site scriting
OrtaCVSS 5,4İstismar yokEPSS %0newstatpress project · newstatpress24 Haz 2022
- CVE-2015-406316İzleyin
Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote auth
DüşükCVSS 3,5Kavram kanıtıEPSS %6newstatpress project · newstatpress27 May 2015