nextendweb kayıtları
nextendweb üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %20
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-502 Deserialization of Untrusted Data2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-9893İstismar yok | Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth providernextendweb · nextend social login pro · CWE-288 | Kritik9,8 | — | %0,7 | 16 Eki 2024 |
36İzleyin | CVE-2022-3357Kavram kanıtı | Smart Slider 3 < 3.5.1.11 - PHP Object Injectionnextendweb · smart slider 3 · CWE-502 | Yüksek8,8 | — | %2,0 | 31 Eki 2022 |
35İzleyin | CVE-2022-45845İstismar yok | WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injectionnextendweb · smart slider 3 · CWE-502 | Yüksek8,8 | — | %0,5 | 19 Oca 2024 |
25İzleyin | CVE-2015-4557İstismar yok | Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Connenextendweb · nextend twitter connect · CWE-79 | Orta6,1 | — | %1,9 | 12 Nis 2018 |
21İzleyin | CVE-2021-24382İstismar yok | Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)nextendweb · smart slider · CWE-79 | Orta5,4 | — | %0,7 | 14 Haz 2021 |
21İzleyin | CVE-2023-0660İstismar yok | Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSSnextendweb · smart slider 3 · CWE-79 | Orta5,4 | — | %0,5 | 27 Mar 2023 |
21İzleyin | CVE-2022-45843İstismar yok | WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)nextendweb · smart slider 3 · CWE-79 | Orta5,4 | — | %0,4 | 23 Mar 2023 |
21İzleyin | CVE-2024-1775İstismar yok | Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_descriptionnextendweb · nextend social login · CWE-79 | Orta5,4 | — | %0,4 | 2 Mar 2024 |
18İzleyin | CVE-2014-8800Kavram kanıtı | Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress nextendweb · nextend facebook connect · CWE-79 | Orta4,3 | — | %3,8 | 5 Ara 2014 |
18İzleyin | CVE-2015-4413İstismar yok | Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugnextendweb · facebook connect · CWE-79 | Orta4,3 | — | %2,7 | 24 Haz 2015 |
- CVE-2024-989339İzleyin
Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider
KritikCVSS 9,8İstismar yokEPSS %1nextendweb · nextend social login pro16 Eki 2024
- CVE-2022-335736İzleyin
Smart Slider 3 < 3.5.1.11 - PHP Object Injection
YüksekCVSS 8,8Kavram kanıtıEPSS %2nextendweb · smart slider 331 Eki 2022
- CVE-2022-4584535İzleyin
WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection
YüksekCVSS 8,8İstismar yokEPSS %1nextendweb · smart slider 319 Oca 2024
- CVE-2015-455725İzleyin
Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Conne
OrtaCVSS 6,1İstismar yokEPSS %2nextendweb · nextend twitter connect12 Nis 2018
- CVE-2021-2438221İzleyin
Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %1nextendweb · smart slider14 Haz 2021
- CVE-2023-066021İzleyin
Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0nextendweb · smart slider 327 Mar 2023
- CVE-2022-4584321İzleyin
WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0nextendweb · smart slider 323 Mar 2023
- CVE-2024-177521İzleyin
Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description
OrtaCVSS 5,4İstismar yokEPSS %0nextendweb · nextend social login2 Mar 2024
- CVE-2014-880018İzleyin
Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress
OrtaCVSS 4,3Kavram kanıtıEPSS %4nextendweb · nextend facebook connect5 Ara 2014
- CVE-2015-441318İzleyin
Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plug
OrtaCVSS 4,3İstismar yokEPSS %3nextendweb · facebook connect24 Haz 2015