PublishPress kayıtları
publishpress üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-502 Deserialization of Untrusted Data1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2021-25032Kavram kanıtı | PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromisepublishpress · capabilities · CWE-352 | Kritik9,8 | — | %6,6 | 10 Oca 2022 |
35İzleyin | CVE-2024-9215İstismar yok | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+)publishpress · co-authors, multiple authors and guest authors in an author box with publishpress authors · CWE-639 | Yüksek8,8 | — | %0,5 | 16 Eki 2024 |
28İzleyin | CVE-2022-3366İstismar yok | PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injectionpublishpress · capabilities · CWE-502 | Yüksek7,2 | — | %1,4 | 31 Eki 2022 |
26İzleyin | CVE-2021-24783İstismar yok | Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletionpublishpress · post expirator · CWE-863 | Orta6,5 | — | %0,8 | 8 Kas 2021 |
- CVE-2021-2503241Planlayın
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
KritikCVSS 9,8Kavram kanıtıEPSS %6publishpress · capabilities10 Oca 2022
- CVE-2024-921535İzleyin
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+)
YüksekCVSS 8,8İstismar yokEPSS %0publishpress · co-authors, multiple authors and guest authors in an author box with publishpress authors16 Eki 2024
- CVE-2022-336628İzleyin
PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection
YüksekCVSS 7,2İstismar yokEPSS %1publishpress · capabilities31 Eki 2022
- CVE-2021-2478326İzleyin
Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion
OrtaCVSS 6,5İstismar yokEPSS %0publishpress · post expirator8 Kas 2021