İçeriğe atla
Noroxi

plugin-planet kayıtları

plugin-planet üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%40,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2019-25138
    40Planlayın

    User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %2

    plugin-planet · user submitted posts6 Haz 2023

  • CVE-2023-45603
    39İzleyin

    WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %1

    plugin-planet · user submitted posts20 Ara 2023

  • CVE-2022-1165
    37İzleyin

    Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing

    KritikCVSS 9,1İstismar yokEPSS %2

    plugin-planet · blackhole for bad bots4 Nis 2022

  • CVE-2022-27849
    31İzleyin

    WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    plugin-planet · simple ajax chat15 Nis 2022

  • CVE-2024-1983
    28İzleyin

    Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS

    YüksekCVSS 7,1İstismar yokEPSS %0

    plugin-planet · simple ajax chat20 Mar 2024

  • CVE-2021-24409
    25İzleyin

    Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    plugin-planet · prismatic12 Tem 2021

  • CVE-2016-11001
    24İzleyin

    The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.

    OrtaCVSS 6,1İstismar yokEPSS %1

    plugin-planet · user submitted posts20 Eyl 2019

  • CVE-2022-25601
    24İzleyin

    WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %1

    plugin-planet · contact form x11 Mar 2022

  • CVE-2022-25610
    24İzleyin

    WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %1

    plugin-planet · simple ajax chat25 Mar 2022

  • CVE-2024-0979
    24İzleyin

    Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    plugin-planet · dashboard widgets suite13 Haz 2024

  • CVE-2021-24408
    21İzleyin

    Prismatic < 2.8 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    plugin-planet · prismatic12 Tem 2021

  • CVE-2023-5614
    21İzleyin

    Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · theme switcha20 Eki 2023

  • CVE-2023-4308
    21İzleyin

    User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · user submitted posts15 Ağu 2023

  • CVE-2023-4779
    21İzleyin

    User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · user submitted posts6 Eyl 2023

  • CVE-2023-4838
    21İzleyin

    The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to,

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · simple download counter8 Eyl 2023

  • CVE-2024-2470
    21İzleyin

    Simple Ajax Chat < 20240412 - Admin+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · simple ajax chat4 Haz 2024

  • CVE-2025-46240
    21İzleyin

    WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · simple download counter22 Nis 2025

  • CVE-2025-46239
    21İzleyin

    WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    plugin-planet · theme switcha22 Nis 2025

  • CVE-2024-5002
    19İzleyin

    User Submitted Posts < 20240516 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    plugin-planet · user submitted posts13 Tem 2024

  • CVE-2023-49743
    19İzleyin

    WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    plugin-planet · dashboard widget suite14 Ara 2023

  • CVE-2023-26517
    19İzleyin

    WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    plugin-planet · dashboard widget suite6 May 2023

  • CVE-2022-27850
    17İzleyin

    WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    plugin-planet · simple ajax chat15 Nis 2022