RedNao kayıtları
rednao üreticisine ait 22 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %31,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)8
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-862 Missing Authorization5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
22 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-40207İstismar yok | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injectionrednao · donations made easy - smart donations · CWE-89 | Kritik9,8 | — | %0,6 | 6 Kas 2023 |
35İzleyin | CVE-2019-5924İstismar yok | Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of adrednao · smart forms · CWE-352 | Yüksek8,8 | — | %1,1 | 12 Mar 2019 |
35İzleyin | CVE-2023-3677İstismar yok | WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Exportrednao · woocommerce pdf invoice builder · CWE-89 | Yüksek8,8 | — | %0,7 | 31 Ağu 2023 |
35İzleyin | CVE-2023-38475İstismar yok | WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerabilityrednao · donations made easy - smart donations · CWE-862 | Yüksek8,8 | — | %0,6 | 13 Ara 2024 |
35İzleyin | CVE-2023-49856İstismar yok | WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerabilityrednao · smart forms · CWE-862 | Yüksek8,8 | — | %0,5 | 9 Ara 2024 |
35İzleyin | CVE-2023-47551İstismar yok | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)rednao · donations made easy - smart donations · CWE-352 | Yüksek8,8 | — | %0,2 | 18 Kas 2023 |
35İzleyin | CVE-2023-51486İstismar yok | WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerabilityrednao · woocommerce pdf invoice builder · CWE-352 | Yüksek8,8 | — | %0,2 | 15 Mar 2024 |
26İzleyin | CVE-2022-0163İstismar yok | Smart Forms < 2.6.71 - Subscriber+ Form Data Downloadrednao · smart forms · CWE-862 | Orta6,5 | — | %0,9 | 7 Mar 2022 |
26İzleyin | CVE-2024-1307İstismar yok | Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Controlrednao · smart forms · CWE-863 | Orta6,5 | — | %0,5 | 15 Nis 2024 |
24İzleyin | CVE-2023-40664İstismar yok | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)rednao · smart donations · CWE-79 | Orta6,1 | — | %0,4 | 27 Eyl 2023 |
24İzleyin | CVE-2023-32603İstismar yok | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)rednao · smart donations · CWE-79 | Orta6,1 | — | %0,3 | 25 Ağu 2023 |
24İzleyin | CVE-2023-46076İstismar yok | WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)rednao · woocommerce pdf invoice builder · CWE-79 | Orta6,1 | — | %0,3 | 26 Eki 2023 |
24İzleyin | CVE-2023-47550İstismar yok | WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)rednao · donations made easy - smart donations · CWE-352 | Orta6,1 | — | %0,2 | 14 Kas 2023 |
24İzleyin | CVE-2023-7203İstismar yok | Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletionrednao · smart forms · CWE-352 | Orta6,1 | — | %0,2 | 27 Şub 2024 |
23İzleyin | CVE-2024-1905İstismar yok | Smart Forms < 2.6.96 - Admin+ Stored XSSrednao · smart forms · CWE-79 | Orta5,9 | — | %0,4 | 29 Nis 2024 |
21İzleyin | CVE-2024-7414İstismar yok | PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosureedgarrojas · pdf builder for wpforms · CWE-200 | Orta5,3 | — | %0,5 | 12 Ağu 2024 |
21İzleyin | CVE-2024-1306İstismar yok | Smart Forms < 2.6.94 - Edit Entries via CSRFrednao · smart forms · CWE-352 | Orta5,4 | — | %0,2 | 15 Nis 2024 |
19İzleyin | CVE-2023-4160İstismar yok | WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scriptingrednao · woocommerce pdf invoice builder · CWE-79 | Orta4,8 | — | %0,4 | 31 Ağu 2023 |
17İzleyin | CVE-2023-4245İstismar yok | WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposurerednao · woocommerce pdf invoice builder · CWE-862 | Orta4,3 | — | %0,5 | 31 Ağu 2023 |
17İzleyin | CVE-2024-33593İstismar yok | WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerabilityrednao · smart forms · CWE-862 | Orta4,3 | — | %0,3 | 29 Nis 2024 |
17İzleyin | CVE-2023-4161İstismar yok | WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creationrednao · woocommerce pdf invoice builder · CWE-352 | Orta4,3 | — | %0,3 | 31 Ağu 2023 |
17İzleyin | CVE-2023-3764İstismar yok | WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Saverednao · woocommerce pdf invoice builder · CWE-352 | Orta4,3 | — | %0,2 | 31 Ağu 2023 |
- CVE-2023-4020739İzleyin
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %0rednao · donations made easy - smart donations6 Kas 2023
- CVE-2019-592435İzleyin
Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of ad
YüksekCVSS 8,8İstismar yokEPSS %1rednao · smart forms12 Mar 2019
- CVE-2023-367735İzleyin
WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export
YüksekCVSS 8,8İstismar yokEPSS %0rednao · woocommerce pdf invoice builder31 Ağu 2023
- CVE-2023-3847535İzleyin
WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0rednao · donations made easy - smart donations13 Ara 2024
- CVE-2023-4985635İzleyin
WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0rednao · smart forms9 Ara 2024
- CVE-2023-4755135İzleyin
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0rednao · donations made easy - smart donations18 Kas 2023
- CVE-2023-5148635İzleyin
WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0rednao · woocommerce pdf invoice builder15 Mar 2024
- CVE-2022-016326İzleyin
Smart Forms < 2.6.71 - Subscriber+ Form Data Download
OrtaCVSS 6,5İstismar yokEPSS %0rednao · smart forms7 Mar 2022
- CVE-2024-130726İzleyin
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
OrtaCVSS 6,5İstismar yokEPSS %0rednao · smart forms15 Nis 2024
- CVE-2023-4066424İzleyin
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0rednao · smart donations27 Eyl 2023
- CVE-2023-3260324İzleyin
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0rednao · smart donations25 Ağu 2023
- CVE-2023-4607624İzleyin
WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0rednao · woocommerce pdf invoice builder26 Eki 2023
- CVE-2023-4755024İzleyin
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0rednao · donations made easy - smart donations14 Kas 2023
- CVE-2023-720324İzleyin
Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
OrtaCVSS 6,1İstismar yokEPSS %0rednao · smart forms27 Şub 2024
- CVE-2024-190523İzleyin
Smart Forms < 2.6.96 - Admin+ Stored XSS
OrtaCVSS 5,9İstismar yokEPSS %0rednao · smart forms29 Nis 2024
- CVE-2024-741421İzleyin
PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0edgarrojas · pdf builder for wpforms12 Ağu 2024
- CVE-2024-130621İzleyin
Smart Forms < 2.6.94 - Edit Entries via CSRF
OrtaCVSS 5,4İstismar yokEPSS %0rednao · smart forms15 Nis 2024
- CVE-2023-416019İzleyin
WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0rednao · woocommerce pdf invoice builder31 Ağu 2023
- CVE-2023-424517İzleyin
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0rednao · woocommerce pdf invoice builder31 Ağu 2023
- CVE-2024-3359317İzleyin
WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0rednao · smart forms29 Nis 2024
- CVE-2023-416117İzleyin
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
OrtaCVSS 4,3İstismar yokEPSS %0rednao · woocommerce pdf invoice builder31 Ağu 2023
- CVE-2023-376417İzleyin
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
OrtaCVSS 4,3İstismar yokEPSS %0rednao · woocommerce pdf invoice builder31 Ağu 2023