pinpoint kayıtları
pinpoint üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %37,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-472 External Control of Assumed-Immutable Web Parameter1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2015-9460İstismar yok | The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.pinpoint · pinpoint booking system · CWE-89 | Yüksek8,8 | — | %1,9 | 10 Eki 2019 |
35İzleyin | CVE-2023-0220İstismar yok | Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLipinpoint · pinpoint booking system · CWE-89 | Yüksek8,8 | — | %0,9 | 13 Şub 2023 |
35İzleyin | CVE-2023-45270İstismar yok | WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)pinpoint · pinpoint booking system · CWE-352 | Yüksek8,8 | — | %0,2 | 13 Eki 2023 |
26İzleyin | CVE-2024-7112İstismar yok | Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injectionpinpoint · pinpoint booking system · CWE-89 | Orta6,5 | — | %0,5 | 7 Eyl 2024 |
26İzleyin | CVE-2023-38520İstismar yok | WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tamperingpinpoint.world · pinpoint booking system · CWE-472 | Orta6,5 | — | %0,4 | 4 Haz 2024 |
26İzleyin | CVE-2024-13235İstismar yok | Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injectionpinpoint · pinpoint booking system · CWE-89 | Orta6,5 | — | %0,4 | 21 Şub 2025 |
21İzleyin | CVE-2024-3636İstismar yok | Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSSpinpoint · pinpoint booking system · CWE-79 | Orta5,4 | — | %0,4 | 5 Ağu 2024 |
19İzleyin | CVE-2023-25062İstismar yok | WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)pinpoint · pinpoint booking system · CWE-79 | Orta4,8 | — | %0,5 | 6 Nis 2023 |
- CVE-2015-946036İzleyin
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
YüksekCVSS 8,8İstismar yokEPSS %2pinpoint · pinpoint booking system10 Eki 2019
- CVE-2023-022035İzleyin
Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi
YüksekCVSS 8,8İstismar yokEPSS %1pinpoint · pinpoint booking system13 Şub 2023
- CVE-2023-4527035İzleyin
WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0pinpoint · pinpoint booking system13 Eki 2023
- CVE-2024-711226İzleyin
Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %1pinpoint · pinpoint booking system7 Eyl 2024
- CVE-2023-3852026İzleyin
WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering
OrtaCVSS 6,5İstismar yokEPSS %0pinpoint.world · pinpoint booking system4 Haz 2024
- CVE-2024-1323526İzleyin
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
OrtaCVSS 6,5İstismar yokEPSS %0pinpoint · pinpoint booking system21 Şub 2025
- CVE-2024-363621İzleyin
Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0pinpoint · pinpoint booking system5 Ağu 2024
- CVE-2023-2506219İzleyin
WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %1pinpoint · pinpoint booking system6 Nis 2023