patreon kayıtları
patreon üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %10
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-502 Deserialization of Untrusted Data1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-20984İstismar yok | The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.patreon · patreon wordpress · CWE-502 | Kritik9,8 | — | %2,0 | 22 Ağu 2019 |
39İzleyin | CVE-2021-24228İstismar yok | Patreon WordPress < 1.7.2 - Reflected XSS on Login Formpatreon · patreon wordpress · CWE-79 | Kritik9,6 | — | %1,9 | 12 Nis 2021 |
39İzleyin | CVE-2021-24229İstismar yok | Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX actionpatreon · patreon wordpress · CWE-79 | Kritik9,6 | — | %1,8 | 12 Nis 2021 |
36İzleyin | CVE-2023-41387İstismar yok | A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbpatreon · flutter downloader · CWE-89 | Kritik9,1 | — | %0,9 | 19 Eyl 2023 |
35İzleyin | CVE-2023-41129İstismar yok | WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)patreon · patreon wordpress · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2023 |
32İzleyin | CVE-2021-24227Kavram kanıtı | Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosurepatreon · patreon wordpress · CWE-200 | Yüksek7,5 | — | %5,9 | 12 Nis 2021 |
32İzleyin | CVE-2021-24230İstismar yok | Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Metapatreon · patreon wordpress · CWE-352 | Yüksek8,1 | — | %0,6 | 12 Nis 2021 |
26İzleyin | CVE-2021-24231İstismar yok | Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreonpatreon · patreon wordpress · CWE-352 | Orta6,5 | — | %0,6 | 12 Nis 2021 |
22İzleyin | CVE-2021-25026İstismar yok | Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scriptingpatreon · patreon wordpress · CWE-79 | Orta5,5 | — | %0,7 | 14 Mar 2022 |
21İzleyin | CVE-2024-37430İstismar yok | WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerabilitypatreon · patreon wordpress · CWE-290 | Orta5,3 | — | %0,4 | 9 Tem 2024 |
- CVE-2018-2098440Planlayın
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
KritikCVSS 9,8İstismar yokEPSS %2patreon · patreon wordpress22 Ağu 2019
- CVE-2021-2422839İzleyin
Patreon WordPress < 1.7.2 - Reflected XSS on Login Form
KritikCVSS 9,6İstismar yokEPSS %2patreon · patreon wordpress12 Nis 2021
- CVE-2021-2422939İzleyin
Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action
KritikCVSS 9,6İstismar yokEPSS %2patreon · patreon wordpress12 Nis 2021
- CVE-2023-4138736İzleyin
A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arb
KritikCVSS 9,1İstismar yokEPSS %1patreon · flutter downloader19 Eyl 2023
- CVE-2023-4112935İzleyin
WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0patreon · patreon wordpress18 Kas 2023
- CVE-2021-2422732İzleyin
Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
YüksekCVSS 7,5Kavram kanıtıEPSS %6patreon · patreon wordpress12 Nis 2021
- CVE-2021-2423032İzleyin
Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta
YüksekCVSS 8,1İstismar yokEPSS %1patreon · patreon wordpress12 Nis 2021
- CVE-2021-2423126İzleyin
Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
OrtaCVSS 6,5İstismar yokEPSS %1patreon · patreon wordpress12 Nis 2021
- CVE-2021-2502622İzleyin
Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 5,5İstismar yokEPSS %1patreon · patreon wordpress14 Mar 2022
- CVE-2024-3743021İzleyin
WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0patreon · patreon wordpress9 Tem 2024