Relevanssi kayıtları
relevanssi üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %16,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-3214İstismar yok | Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injectionrelevanssi · relevanssi · CWE-1236 | Kritik9,8 | — | %0,7 | 9 Nis 2024 |
36İzleyin | CVE-2024-1380Kavram kanıtı | Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Exportrelevanssi · relevanssi · CWE-862 | Orta5,3 | — | %50,1 | 13 Mar 2024 |
35İzleyin | CVE-2016-10949İstismar yok | The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.relevanssi · relevanssi · CWE-89 | Yüksek8,8 | — | %1,5 | 13 Eyl 2019 |
32İzleyin | CVE-2024-3213İstismar yok | Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Updaterelevanssi · relevanssi · CWE-862 | Yüksek8,2 | — | %0,8 | 9 Nis 2024 |
30İzleyin | CVE-2024-7630İstismar yok | Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposurerelevanssi · relevanssi · CWE-200 | Yüksek7,5 | — | %0,4 | 15 Ağu 2024 |
24İzleyin | CVE-2017-1000038İstismar yok | WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affectrelevanssi · relevanssi · CWE-79 | Orta6,1 | — | %1,0 | 17 Tem 2017 |
24İzleyin | CVE-2017-1000225İstismar yok | Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anytrelevanssi · relevanssi · CWE-79 | Orta6,1 | — | %0,7 | 17 Kas 2017 |
22İzleyin | CVE-2018-9034Kavram kanıtı | Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to injectrelevanssi · relevanssi · CWE-79 | Orta5,4 | — | %1,9 | 4 Nis 2018 |
21İzleyin | CVE-2023-7199İstismar yok | Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosurerelevanssi · relevanssi · CWE-639 | Orta5,3 | — | %0,6 | 29 Oca 2024 |
21İzleyin | CVE-2024-9021İstismar yok | Relevanssi < 4.23.1 - Contributor+ Stored XSSrelevanssi · relevanssi · CWE-79 | Orta5,4 | — | %0,4 | 8 Eki 2024 |
21İzleyin | CVE-2024-7573İstismar yok | Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injectioncomesio · relevanssi live ajax search · CWE-88 | Orta5,3 | — | %0,4 | 27 Ağu 2024 |
17İzleyin | CVE-2014-9443İstismar yok | Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary webrelevanssi · relevanssi · CWE-79 | Orta4,3 | — | %1,6 | 2 Oca 2015 |
- CVE-2024-321439İzleyin
Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection
KritikCVSS 9,8İstismar yokEPSS %0relevanssi · relevanssi9 Nis 2024
- CVE-2024-138036İzleyin
Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export
OrtaCVSS 5,3Kavram kanıtıEPSS %50relevanssi · relevanssi13 Mar 2024
- CVE-2016-1094935İzleyin
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.
YüksekCVSS 8,8İstismar yokEPSS %1relevanssi · relevanssi13 Eyl 2019
- CVE-2024-321332İzleyin
Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
YüksekCVSS 8,2İstismar yokEPSS %0relevanssi · relevanssi9 Nis 2024
- CVE-2024-763030İzleyin
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
YüksekCVSS 7,5İstismar yokEPSS %0relevanssi · relevanssi15 Ağu 2024
- CVE-2017-100003824İzleyin
WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affect
OrtaCVSS 6,1İstismar yokEPSS %1relevanssi · relevanssi17 Tem 2017
- CVE-2017-100022524İzleyin
Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anyt
OrtaCVSS 6,1İstismar yokEPSS %0relevanssi · relevanssi17 Kas 2017
- CVE-2018-903422İzleyin
Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject
OrtaCVSS 5,4Kavram kanıtıEPSS %1relevanssi · relevanssi4 Nis 2018
- CVE-2023-719921İzleyin
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0relevanssi · relevanssi29 Oca 2024
- CVE-2024-902121İzleyin
Relevanssi < 4.23.1 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0relevanssi · relevanssi8 Eki 2024
- CVE-2024-757321İzleyin
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
OrtaCVSS 5,3İstismar yokEPSS %0comesio · relevanssi live ajax search27 Ağu 2024
- CVE-2014-944317İzleyin
Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web
OrtaCVSS 4,3İstismar yokEPSS %1relevanssi · relevanssi2 Oca 2015