PenciDesign kayıtları
pencidesign üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-502 Deserialization of Untrusted Data1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-49826İstismar yok | WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injectionpencidesign · soledad · CWE-502 | Kritik9,8 | — | %0,6 | 21 Ara 2023 |
32İzleyin | CVE-2024-11289İstismar yok | Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusionpencidesign · soledad · CWE-98 | Yüksek8,1 | — | %0,7 | 6 Ara 2024 |
32İzleyin | CVE-2023-49825İstismar yok | WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injectionpencidesign · soledad · CWE-89 | Yüksek8,1 | — | %0,5 | 20 Ara 2023 |
28İzleyin | CVE-2024-31367İstismar yok | WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerabilitypencidesign · soledad · CWE-862 | Yüksek7,1 | — | %0,4 | 9 Nis 2024 |
26İzleyin | CVE-2024-31368İstismar yok | WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerabilitypencidesign · soledad · CWE-862 | Orta6,5 | — | %0,4 | 9 Nis 2024 |
24İzleyin | CVE-2022-3209İstismar yok | Soledad < 8.2.5 - Reflected Cross-site Scriptingpencidesign · soledad · CWE-79 | Orta6,1 | — | %0,5 | 10 Eki 2022 |
24İzleyin | CVE-2023-49827İstismar yok | WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)pencidesign · soledad · CWE-79 | Orta6,1 | — | %0,4 | 14 Ara 2023 |
21İzleyin | CVE-2022-41788İstismar yok | WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerabilitypencidesign · soledad · CWE-79 | Orta5,4 | — | %0,4 | 18 Kas 2022 |
21İzleyin | CVE-2024-31369İstismar yok | WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerabilitypencidesign · soledad · CWE-352 | Orta5,4 | — | %0,2 | 9 Nis 2024 |
- CVE-2023-4982639İzleyin
WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %1pencidesign · soledad21 Ara 2023
- CVE-2024-1128932İzleyin
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
YüksekCVSS 8,1İstismar yokEPSS %1pencidesign · soledad6 Ara 2024
- CVE-2023-4982532İzleyin
WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection
YüksekCVSS 8,1İstismar yokEPSS %1pencidesign · soledad20 Ara 2023
- CVE-2024-3136728İzleyin
WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0pencidesign · soledad9 Nis 2024
- CVE-2024-3136826İzleyin
WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0pencidesign · soledad9 Nis 2024
- CVE-2022-320924İzleyin
Soledad < 8.2.5 - Reflected Cross-site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1pencidesign · soledad10 Eki 2022
- CVE-2023-4982724İzleyin
WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0pencidesign · soledad14 Ara 2023
- CVE-2022-4178821İzleyin
WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0pencidesign · soledad18 Kas 2022
- CVE-2024-3136921İzleyin
WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0pencidesign · soledad9 Nis 2024