OptinMonster kayıtları
optinmonster üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-285 Improper Authorization1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-39341Kavram kanıtı | OptinMonster <= 2.6.4 Unprotected REST-API Endpointsoptinmonster · optinmonster · CWE-285 | Yüksek8,2 | — | %21,9 | 1 Kas 2021 |
26İzleyin | CVE-2023-0772İstismar yok | Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosureoptinmonster · optinmonster · CWE-639 | Orta6,5 | — | %0,8 | 13 Mar 2023 |
24İzleyin | CVE-2021-39325İstismar yok | OptinMonster <= 2.6.0 Reflected Cross-Site Scriptingoptinmonster · optinmonster · CWE-79 | Orta6,1 | — | %0,9 | 20 Eyl 2021 |
21İzleyin | CVE-2016-10996İstismar yok | The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.optinmonster · optinmonster · CWE-863 | Orta5,3 | — | %1,1 | 20 Eyl 2019 |
21İzleyin | CVE-2024-4045İstismar yok | Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scoptinmonster · optinmonster · CWE-79 | Orta5,4 | — | %0,3 | 25 May 2024 |
- CVE-2021-3934139İzleyin
OptinMonster <= 2.6.4 Unprotected REST-API Endpoints
YüksekCVSS 8,2Kavram kanıtıEPSS %22optinmonster · optinmonster1 Kas 2021
- CVE-2023-077226İzleyin
Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure
OrtaCVSS 6,5İstismar yokEPSS %1optinmonster · optinmonster13 Mar 2023
- CVE-2021-3932524İzleyin
OptinMonster <= 2.6.0 Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1optinmonster · optinmonster20 Eyl 2021
- CVE-2016-1099621İzleyin
The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.
OrtaCVSS 5,3İstismar yokEPSS %1optinmonster · optinmonster20 Eyl 2019
- CVE-2024-404521İzleyin
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Sc
OrtaCVSS 5,4İstismar yokEPSS %0optinmonster · optinmonster25 May 2024