pressified kayıtları
pressified üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-35040İstismar yok | WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerabilitypressified · sendpress · CWE-862 | Kritik9,8 | — | %0,4 | 13 Haz 2024 |
36İzleyin | CVE-2015-9448İstismar yok | The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.pressified · sendpress · CWE-89 | Yüksek8,8 | — | %1,9 | 26 Eyl 2019 |
35İzleyin | CVE-2023-41730İstismar yok | WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)pressified · sendpress · CWE-352 | Yüksek8,8 | — | %0,2 | 10 Eki 2023 |
27İzleyin | CVE-2024-1588İstismar yok | SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settingspressified · sendpress · CWE-79 | Orta6,8 | — | %0,7 | 8 Nis 2024 |
24İzleyin | CVE-2023-47517İstismar yok | WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)pressified · sendpress · CWE-79 | Orta6,1 | — | %0,4 | 14 Kas 2023 |
24İzleyin | CVE-2024-1589İstismar yok | SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settingspressified · sendpress · CWE-79 | Orta6,1 | — | %0,4 | 8 Nis 2024 |
21İzleyin | CVE-2023-5660İstismar yok | SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodepressified · sendpress · CWE-79 | Orta5,4 | — | %0,7 | 7 Kas 2023 |
19İzleyin | CVE-2023-41729İstismar yok | WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)pressified · sendpress · CWE-79 | Orta4,8 | — | %0,4 | 2 Eki 2023 |
- CVE-2023-3504039İzleyin
WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0pressified · sendpress13 Haz 2024
- CVE-2015-944836İzleyin
The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
YüksekCVSS 8,8İstismar yokEPSS %2pressified · sendpress26 Eyl 2019
- CVE-2023-4173035İzleyin
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0pressified · sendpress10 Eki 2023
- CVE-2024-158827İzleyin
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
OrtaCVSS 6,8İstismar yokEPSS %1pressified · sendpress8 Nis 2024
- CVE-2023-4751724İzleyin
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0pressified · sendpress14 Kas 2023
- CVE-2024-158924İzleyin
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
OrtaCVSS 6,1İstismar yokEPSS %0pressified · sendpress8 Nis 2024
- CVE-2023-566021İzleyin
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1pressified · sendpress7 Kas 2023
- CVE-2023-4172919İzleyin
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0pressified · sendpress2 Eki 2023