plugins360 kayıtları
plugins360 üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %20
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2022-2633Kavram kanıtı | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dplugins360 · all-in-one video gallery · CWE-610 | Yüksek8,2 | — | %33,8 | 6 Eyl 2022 |
35İzleyin | CVE-2024-4670İstismar yok | All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcodeplugins360 · all-in-one video gallery · CWE-98 | Yüksek8,8 | — | %0,6 | 15 May 2024 |
35İzleyin | CVE-2024-31248İstismar yok | WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerabilityplugins360 · all-in-one video gallery · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
30İzleyin | CVE-2021-24970Kavram kanıtı | All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusionplugins360 · all-in-one video gallery · CWE-22 | Yüksek7,2 | — | %5,9 | 13 Ara 2021 |
21İzleyin | CVE-2024-6629İstismar yok | All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcodeplugins360 · all-in-one video gallery · CWE-79 | Orta5,4 | — | %0,3 | 24 Tem 2024 |
- CVE-2022-263342Planlayın
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd
YüksekCVSS 8,2Kavram kanıtıEPSS %34plugins360 · all-in-one video gallery6 Eyl 2022
- CVE-2024-467035İzleyin
All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode
YüksekCVSS 8,8İstismar yokEPSS %1plugins360 · all-in-one video gallery15 May 2024
- CVE-2024-3124835İzleyin
WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0plugins360 · all-in-one video gallery9 Haz 2024
- CVE-2021-2497030İzleyin
All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
YüksekCVSS 7,2Kavram kanıtıEPSS %6plugins360 · all-in-one video gallery13 Ara 2021
- CVE-2024-662921İzleyin
All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0plugins360 · all-in-one video gallery24 Tem 2024