plugin kayıtları

plugin üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-28659İstismar yok	The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbcplugin · waiting · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	22 Mar 2023
26İzleyin	CVE-2023-1865İstismar yok	YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Resetplugin · yourchannel · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,5	—	%0,7	5 Nis 2023
21İzleyin	CVE-2023-1868İstismar yok	YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Resetplugin · yourchannel · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,6	5 Nis 2023
21İzleyin	CVE-2022-4833İstismar yok	YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcodeplugin · yourchannel · CWE-79 XSS	Orta5,4	—	%0,6	6 Şub 2023
21İzleyin	CVE-2023-0282İstismar yok	YourChannel < 1.2.2 - Subscriber+ Stored XSSplugin · yourchannel · CWE-79 XSS	Orta5,4	—	%0,5	6 Şub 2023
21İzleyin	CVE-2023-2757İstismar yok	Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scriptingplugin · waiting · CWE-862 Erişim denetimi (IDOR) XSS	Orta5,4	—	%0,5	17 May 2023
19İzleyin	CVE-2023-1869İstismar yok	YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scriptingplugin · yourchannel · CWE-79 XSS	Orta4,8	—	%0,5	5 Nis 2023
19İzleyin	CVE-2022-4954İstismar yok	Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scriptingplugin · waiting · CWE-79 XSS	Orta4,8	—	%0,3	20 Eki 2023
17İzleyin	CVE-2023-3999İstismar yok	Waiting: One-click countdowns <= 0.6.2 - Missing Authorizationplugin · waiting · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	31 Ağu 2023
17İzleyin	CVE-2023-1870İstismar yok	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Updateplugin · yourchannel · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,3	5 Nis 2023
17İzleyin	CVE-2023-1867İstismar yok	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Changeplugin · yourchannel · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,3	5 Nis 2023
17İzleyin	CVE-2023-1866İstismar yok	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Resetplugin · yourchannel · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,3	5 Nis 2023
17İzleyin	CVE-2023-1871İstismar yok	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Resetplugin · yourchannel · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,3	5 Nis 2023
17İzleyin	CVE-2023-4000İstismar yok	Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgeryplugin · waiting · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	31 Ağu 2023

CVE-2023-28659
35İzleyin
The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
plugin · waiting22 Mar 2023
CVE-2023-1865
26İzleyin
YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
plugin · yourchannel5 Nis 2023
CVE-2023-1868
21İzleyin
YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
plugin · yourchannel5 Nis 2023
CVE-2022-4833
21İzleyin
YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
plugin · yourchannel6 Şub 2023
CVE-2023-0282
21İzleyin
YourChannel < 1.2.2 - Subscriber+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
plugin · yourchannel6 Şub 2023
CVE-2023-2757
21İzleyin
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- XSS
plugin · waiting17 May 2023
CVE-2023-1869
19İzleyin
YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
plugin · yourchannel5 Nis 2023
CVE-2022-4954
19İzleyin
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
plugin · waiting20 Eki 2023
CVE-2023-3999
17İzleyin
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
plugin · waiting31 Ağu 2023
CVE-2023-1870
17İzleyin
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Update
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin · yourchannel5 Nis 2023
CVE-2023-1867
17İzleyin
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Change
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin · yourchannel5 Nis 2023
CVE-2023-1866
17İzleyin
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Reset
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin · yourchannel5 Nis 2023
CVE-2023-1871
17İzleyin
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Reset
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin · yourchannel5 Nis 2023
CVE-2023-4000
17İzleyin
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
plugin · waiting31 Ağu 2023