revmakx kayıtları
revmakx üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %22,2
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-502 Deserialization of Untrusted Data1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
67Bu hafta | CVE-2024-8856Silahlaştırılmış | Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Uploadrevmakx · backup and staging by wp time capsule · CWE-434 | Kritik9,8 | — | %94,0 | 16 Kas 2024 |
65Bu hafta | CVE-2020-8772Silahlaştırılmış | The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.revmakx · infinitewp client · CWE-862 | Kritik9,8 | — | %88,0 | 6 Şub 2020 |
40Planlayın | CVE-2016-15004İstismar yok | InfiniteWP Client Plugin injectionrevmakx · infinitewp client · CWE-74 | Kritik9,8 | — | %1,8 | 23 Tem 2022 |
39İzleyin | CVE-2024-38770İstismar yok | WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerabilityrevmakx · backup and staging by wp time capsule · CWE-269 | Kritik9,8 | — | %0,5 | 1 Ağu 2024 |
28İzleyin | CVE-2023-2916Kavram kanıtı | InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposurerevmakx · infinitewp client · CWE-200 | Orta5,3 | — | %24,0 | 15 Ağu 2023 |
28İzleyin | CVE-2024-49684İstismar yok | WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerabilityrevmakx · backup and staging by wp time capsule · CWE-502 | Yüksek7,2 | — | %0,5 | 23 Eki 2024 |
24İzleyin | CVE-2021-25035İstismar yok | Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scriptingrevmakx · backup and staging by wp time capsule · CWE-79 | Orta6,1 | — | %0,9 | 24 Oca 2022 |
23İzleyin | CVE-2023-6565İstismar yok | InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposurerevmakx · infinitewp client · CWE-922 | Orta5,9 | — | %0,6 | 28 Şub 2024 |
21İzleyin | CVE-2024-10585İstismar yok | InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Readingrevmakx · infinitewp client · CWE-22 | Orta5,3 | — | %0,7 | 8 Oca 2025 |
- CVE-2024-885667Bu hafta
Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8SilahlaştırılmışEPSS %94revmakx · backup and staging by wp time capsule16 Kas 2024
- CVE-2020-877265Bu hafta
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.
KritikCVSS 9,8SilahlaştırılmışEPSS %88revmakx · infinitewp client6 Şub 2020
- CVE-2016-1500440Planlayın
InfiniteWP Client Plugin injection
KritikCVSS 9,8İstismar yokEPSS %2revmakx · infinitewp client23 Tem 2022
- CVE-2024-3877039İzleyin
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1revmakx · backup and staging by wp time capsule1 Ağu 2024
- CVE-2023-291628İzleyin
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
OrtaCVSS 5,3Kavram kanıtıEPSS %24revmakx · infinitewp client15 Ağu 2023
- CVE-2024-4968428İzleyin
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1revmakx · backup and staging by wp time capsule23 Eki 2024
- CVE-2021-2503524İzleyin
Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1revmakx · backup and staging by wp time capsule24 Oca 2022
- CVE-2023-656523İzleyin
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
OrtaCVSS 5,9İstismar yokEPSS %1revmakx · infinitewp client28 Şub 2024
- CVE-2024-1058521İzleyin
InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
OrtaCVSS 5,3İstismar yokEPSS %1revmakx · infinitewp client8 Oca 2025