premio kayıtları
premio üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %43,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-862 Missing Authorization1
- CWE-863 Incorrect Authorization1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-11429İstismar yok | Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusionpremio · stars testimonials — responsive reviews & star ratings · CWE-98 | Yüksek8,8 | — | %0,7 | 5 Ara 2024 |
28İzleyin | CVE-2023-0487İstismar yok | My Sticky Elements < 2.0.9 - Admin+ SQLipremio · my sticky elements · CWE-89 | Yüksek7,2 | — | %1,5 | 27 Şub 2023 |
28İzleyin | CVE-2022-3858İstismar yok | Chaty < 3.0.3 - Admin+ SQLipremio · chaty · CWE-89 | Yüksek7,2 | — | %1,0 | 5 Ara 2022 |
28İzleyin | CVE-2023-40204İstismar yok | WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Uploadpremio · folders · CWE-434 | Yüksek7,2 | — | %0,8 | 20 Ara 2023 |
25İzleyin | CVE-2021-25016Kavram kanıtı | Chaty < 2.8.3 - Reflected Cross-Site Scriptingpremio · chaty · CWE-79 | Orta6,1 | — | %1,8 | 3 Oca 2022 |
24İzleyin | CVE-2023-25019İstismar yok | WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)premio · chaty · CWE-79 | Orta6,1 | — | %0,4 | 30 Ağu 2023 |
21İzleyin | CVE-2022-0148Kavram kanıtı | All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)premio · mystickyelements · CWE-79 | Orta5,4 | — | %1,6 | 7 Şub 2022 |
21İzleyin | CVE-2023-5509İstismar yok | myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletionpremio · mystickymenu · CWE-863 | Orta5,4 | — | %0,5 | 20 Kas 2023 |
21İzleyin | CVE-2023-51362İstismar yok | WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerabilitypremio · my sticky elements · CWE-862 | Orta5,3 | — | %0,5 | 9 Ara 2024 |
21İzleyin | CVE-2024-7317İstismar yok | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting viapremio · folders · CWE-79 | Orta5,4 | — | %0,4 | 6 Ağu 2024 |
21İzleyin | CVE-2025-1450İstismar yok | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributorpremio · floating chat widget · CWE-79 | Orta5,4 | — | %0,3 | 27 Şub 2025 |
19İzleyin | CVE-2021-24425İstismar yok | myStickymenu < 2.5.2 - Authenticated Stored XSSpremio · mystickymenu · CWE-79 | Orta4,8 | — | %0,6 | 2 Ağu 2021 |
19İzleyin | CVE-2021-36846İstismar yok | WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitypremio · chaty · CWE-79 | Orta4,8 | — | %0,6 | 11 Nis 2022 |
19İzleyin | CVE-2023-3248İstismar yok | All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scriptingpremio · my sticky elements · CWE-79 | Orta4,8 | — | %0,5 | 24 Tem 2023 |
19İzleyin | CVE-2023-3245İstismar yok | Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scriptingpremio · chaty · CWE-79 | Orta4,8 | — | %0,5 | 17 Tem 2023 |
19İzleyin | CVE-2024-4090İstismar yok | My Sticky Bar < 2.7.2 - Admin+ Stored XSSpremio · my sticky bar · CWE-79 | Orta4,8 | — | %0,5 | 1 Ağu 2024 |
19İzleyin | CVE-2024-7133İstismar yok | My Sticky Bar < 2.7.3 - Admin+ Stored XSSpremio · my sticky bar · CWE-79 | Orta4,8 | — | %0,4 | 13 Eyl 2024 |
19İzleyin | CVE-2024-4149İstismar yok | Floating Chat Widget < 3.2.3 - Admin+ Stored XSSpremio · floating chat widget · CWE-79 | Orta4,8 | — | %0,4 | 13 Haz 2024 |
19İzleyin | CVE-2023-47759İstismar yok | WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilitypremio · chaty · CWE-79 | Orta4,8 | — | %0,4 | 22 Kas 2023 |
19İzleyin | CVE-2024-2643İstismar yok | My Sticky Bar < 2.6.8 - Admin+ Stored XSSpremio · my sticky bar · CWE-79 | Orta4,8 | — | %0,3 | 15 May 2025 |
17İzleyin | CVE-2024-2023İstismar yok | Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_uploadpremio · folders – unlimited folders to organize media library folder, pages, posts, file manager · CWE-22 | Orta4,3 | — | %0,7 | 14 Haz 2024 |
17İzleyin | CVE-2023-7048İstismar yok | My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposurepremio · my sticky bar · CWE-352 | Orta4,3 | — | %0,2 | 11 Oca 2024 |
15İzleyin | CVE-2024-2972İstismar yok | Floating Chat Widget < 3.1.9 - Editor+ Stored XSSpremio · floating chat widget · CWE-79 | Düşük3,8 | — | %0,4 | 24 Nis 2024 |
- CVE-2024-1142935İzleyin
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion
YüksekCVSS 8,8İstismar yokEPSS %1premio · stars testimonials — responsive reviews & star ratings5 Ara 2024
- CVE-2023-048728İzleyin
My Sticky Elements < 2.0.9 - Admin+ SQLi
YüksekCVSS 7,2İstismar yokEPSS %1premio · my sticky elements27 Şub 2023
- CVE-2022-385828İzleyin
Chaty < 3.0.3 - Admin+ SQLi
YüksekCVSS 7,2İstismar yokEPSS %1premio · chaty5 Ara 2022
- CVE-2023-4020428İzleyin
WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload
YüksekCVSS 7,2İstismar yokEPSS %1premio · folders20 Ara 2023
- CVE-2021-2501625İzleyin
Chaty < 2.8.3 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %2premio · chaty3 Oca 2022
- CVE-2023-2501924İzleyin
WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0premio · chaty30 Ağu 2023
- CVE-2022-014821İzleyin
All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
OrtaCVSS 5,4Kavram kanıtıEPSS %2premio · mystickyelements7 Şub 2022
- CVE-2023-550921İzleyin
myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion
OrtaCVSS 5,4İstismar yokEPSS %1premio · mystickymenu20 Kas 2023
- CVE-2023-5136221İzleyin
WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0premio · my sticky elements9 Ara 2024
- CVE-2024-731721İzleyin
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via
OrtaCVSS 5,4İstismar yokEPSS %0premio · folders6 Ağu 2024
- CVE-2025-145021İzleyin
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor
OrtaCVSS 5,4İstismar yokEPSS %0premio · floating chat widget27 Şub 2025
- CVE-2021-2442519İzleyin
myStickymenu < 2.5.2 - Authenticated Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %1premio · mystickymenu2 Ağu 2021
- CVE-2021-3684619İzleyin
WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1premio · chaty11 Nis 2022
- CVE-2023-324819İzleyin
All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0premio · my sticky elements24 Tem 2023
- CVE-2023-324519İzleyin
Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0premio · chaty17 Tem 2023
- CVE-2024-409019İzleyin
My Sticky Bar < 2.7.2 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0premio · my sticky bar1 Ağu 2024
- CVE-2024-713319İzleyin
My Sticky Bar < 2.7.3 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0premio · my sticky bar13 Eyl 2024
- CVE-2024-414919İzleyin
Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0premio · floating chat widget13 Haz 2024
- CVE-2023-4775919İzleyin
WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0premio · chaty22 Kas 2023
- CVE-2024-264319İzleyin
My Sticky Bar < 2.6.8 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0premio · my sticky bar15 May 2025
- CVE-2024-202317İzleyin
Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload
OrtaCVSS 4,3İstismar yokEPSS %1premio · folders – unlimited folders to organize media library folder, pages, posts, file manager14 Haz 2024
- CVE-2023-704817İzleyin
My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0premio · my sticky bar11 Oca 2024
- CVE-2024-297215İzleyin
Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
DüşükCVSS 3,8İstismar yokEPSS %0premio · floating chat widget24 Nis 2024