reputeinfosystems kayıtları
reputeinfosystems üreticisine ait 52 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %1,9
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %67,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-862 Missing Authorization8
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-639 Authorization Bypass Through User-Controlled Key2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
52 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
50Planlayın | CVE-2022-0739Silahlaştırılmış | BookingPress < 1.0.11 - Unauthenticated SQL Injectionreputeinfosystems · bookingpress · CWE-89 | Kritik9,8 | — | %37,2 | 21 Mar 2022 |
43Planlayın | CVE-2022-0867Kavram kanıtı | ARPrice Lite < 3.6.1 - Unauthenticated SQLireputeinfosystems · pricing table · CWE-89 | Kritik9,8 | — | %13,5 | 16 May 2022 |
40Planlayın | CVE-2024-4620Kavram kanıtı | ArForms < 6.6 - Unauthenticated RCEreputeinfosystems · arforms · CWE-94 | Kritik9,8 | — | %3,3 | 7 Haz 2024 |
39İzleyin | CVE-2024-7350İstismar yok | Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeoverreputeinfosystems · appointment booking calendar plugin and scheduling plugin – bookingpress · CWE-288 | Kritik9,8 | — | %0,7 | 7 Ağu 2024 |
39İzleyin | CVE-2023-51405İstismar yok | WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerabilityreputeinfosystems · bookingpress · CWE-287 | Kritik9,8 | — | %0,7 | 24 Nis 2024 |
39İzleyin | CVE-2024-30223İstismar yok | WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityreputeinfosystems · armember · CWE-502 | Kritik9,8 | — | %0,6 | 28 Mar 2024 |
39İzleyin | CVE-2022-46808İstismar yok | WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injectionreputeinfosystems · armember · CWE-89 | Kritik9,8 | — | %0,6 | 3 Kas 2023 |
39İzleyin | CVE-2023-52200İstismar yok | WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injectionreputeinfosystems · armember · CWE-352 | Kritik9,8 | — | %0,3 | 8 Oca 2024 |
36İzleyin | CVE-2024-32948İstismar yok | WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityreputeinfosystems · armember · CWE-862 | Kritik9,1 | — | %0,6 | 24 Nis 2024 |
35İzleyin | CVE-2024-6467İstismar yok | BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creationreputeinfosystems · bookingpress · CWE-73 | Yüksek8,8 | — | %0,9 | 17 Tem 2024 |
35İzleyin | CVE-2024-6660İstismar yok | BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Optionreputeinfosystems · bookingpress · CWE-280 | Yüksek8,8 | — | %0,6 | 17 Tem 2024 |
35İzleyin | CVE-2024-30222İstismar yok | WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityreputeinfosystems · armember · CWE-502 | Yüksek8,8 | — | %0,6 | 28 Mar 2024 |
35İzleyin | CVE-2024-32706İstismar yok | WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerabilityreputeinfosystems · arforms · CWE-89 | Yüksek8,8 | — | %0,6 | 24 Nis 2024 |
35İzleyin | CVE-2023-51356İstismar yok | WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityreputeinfosystems · armember · CWE-269 | Yüksek8,8 | — | %0,6 | 17 May 2024 |
35İzleyin | CVE-2023-50841İstismar yok | WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injectionreputeinfosystems · bookingpress · CWE-89 | Yüksek8,8 | — | %0,5 | 28 Ara 2023 |
35İzleyin | CVE-2023-47837İstismar yok | WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityreputeinfosystems · armember · CWE-269 | Yüksek8,8 | — | %0,4 | 4 Haz 2024 |
35İzleyin | CVE-2024-32705İstismar yok | WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerabilityreputeinfosystems · arforms · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
35İzleyin | CVE-2022-47425İstismar yok | WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Controlreputeinfosystems · armember · CWE-862 | Yüksek8,8 | — | %0,3 | 9 Ara 2025 |
35İzleyin | CVE-2022-47424İstismar yok | WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)reputeinfosystems · armember · CWE-352 | Yüksek8,8 | — | %0,2 | 19 Kas 2024 |
33İzleyin | CVE-2019-16902Kavram kanıtı | In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by sreputeinfosystems · arforms · CWE-22 | Yüksek7,5 | — | %9,7 | 27 Eyl 2019 |
32İzleyin | CVE-2024-32703İstismar yok | WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerabilityreputeinfosystems · arforms · CWE-22 | Yüksek8,1 | — | %0,6 | 9 Haz 2024 |
32İzleyin | CVE-2024-31270İstismar yok | WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerabilityreputeinfosystems · arforms form builder · CWE-862 | Yüksek8,0 | — | %0,4 | 8 May 2024 |
31İzleyin | CVE-2018-15818İstismar yok | An issue was discovered in Repute ARForms 3.5.1 and prior.reputeinfosystems · repute arforms · CWE-20 | Yüksek7,5 | — | %2,0 | 21 Mar 2019 |
30İzleyin | CVE-2024-54216İstismar yok | WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerabilityreputeinfosystems · arforms · CWE-35 | Yüksek7,7 | — | %0,6 | 6 Ara 2024 |
30İzleyin | CVE-2025-31910İstismar yok | WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerabilityreputeinfosystems · bookingpress · CWE-89 | Yüksek7,6 | — | %0,4 | 1 Nis 2025 |
- CVE-2022-073950Planlayın
BookingPress < 1.0.11 - Unauthenticated SQL Injection
KritikCVSS 9,8SilahlaştırılmışEPSS %37reputeinfosystems · bookingpress21 Mar 2022
- CVE-2022-086743Planlayın
ARPrice Lite < 3.6.1 - Unauthenticated SQLi
KritikCVSS 9,8Kavram kanıtıEPSS %13reputeinfosystems · pricing table16 May 2022
- CVE-2024-462040Planlayın
ArForms < 6.6 - Unauthenticated RCE
KritikCVSS 9,8Kavram kanıtıEPSS %3reputeinfosystems · arforms7 Haz 2024
- CVE-2024-735039İzleyin
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
KritikCVSS 9,8İstismar yokEPSS %1reputeinfosystems · appointment booking calendar plugin and scheduling plugin – bookingpress7 Ağu 2024
- CVE-2023-5140539İzleyin
WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1reputeinfosystems · bookingpress24 Nis 2024
- CVE-2024-3022339İzleyin
WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1reputeinfosystems · armember28 Mar 2024
- CVE-2022-4680839İzleyin
WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1reputeinfosystems · armember3 Kas 2023
- CVE-2023-5220039İzleyin
WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %0reputeinfosystems · armember8 Oca 2024
- CVE-2024-3294836İzleyin
WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
KritikCVSS 9,1İstismar yokEPSS %1reputeinfosystems · armember24 Nis 2024
- CVE-2024-646735İzleyin
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · bookingpress17 Tem 2024
- CVE-2024-666035İzleyin
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · bookingpress17 Tem 2024
- CVE-2024-3022235İzleyin
WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · armember28 Mar 2024
- CVE-2024-3270635İzleyin
WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · arforms24 Nis 2024
- CVE-2023-5135635İzleyin
WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · armember17 May 2024
- CVE-2023-5084135İzleyin
WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1reputeinfosystems · bookingpress28 Ara 2023
- CVE-2023-4783735İzleyin
WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0reputeinfosystems · armember4 Haz 2024
- CVE-2024-3270535İzleyin
WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0reputeinfosystems · arforms9 Haz 2024
- CVE-2022-4742535İzleyin
WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control
YüksekCVSS 8,8İstismar yokEPSS %0reputeinfosystems · armember9 Ara 2025
- CVE-2022-4742435İzleyin
WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0reputeinfosystems · armember19 Kas 2024
- CVE-2019-1690233İzleyin
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by s
YüksekCVSS 7,5Kavram kanıtıEPSS %10reputeinfosystems · arforms27 Eyl 2019
- CVE-2024-3270332İzleyin
WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1reputeinfosystems · arforms9 Haz 2024
- CVE-2024-3127032İzleyin
WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability
YüksekCVSS 8,0İstismar yokEPSS %0reputeinfosystems · arforms form builder8 May 2024
- CVE-2018-1581831İzleyin
An issue was discovered in Repute ARForms 3.5.1 and prior.
YüksekCVSS 7,5İstismar yokEPSS %2reputeinfosystems · repute arforms21 Mar 2019
- CVE-2024-5421630İzleyin
WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability
YüksekCVSS 7,7İstismar yokEPSS %1reputeinfosystems · arforms6 Ara 2024
- CVE-2025-3191030İzleyin
WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0reputeinfosystems · bookingpress1 Nis 2025