scriptsbundle kayıtları
scriptsbundle üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-11349İstismar yok | AdForest <= 5.1.6 - Authentication Bypassscriptsbundle · adforest · CWE-288 | Kritik9,8 | — | %1,2 | 21 Ara 2024 |
39İzleyin | CVE-2024-12857İstismar yok | AdForest <= 5.1.8 - Authentication Bypassscriptsbundle · adforest · CWE-288 | Kritik9,8 | — | %0,7 | 22 Oca 2025 |
39İzleyin | CVE-2024-11350İstismar yok | AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeoverscriptsbundle · adforest · CWE-640 | Kritik9,8 | — | %0,7 | 8 Oca 2025 |
21İzleyin | CVE-2019-15870İstismar yok | The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.scriptsbundle · carspot · CWE-79 | Orta5,4 | — | %0,7 | 3 Eyl 2019 |
21İzleyin | CVE-2025-0169İstismar yok | DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodescriptsbundle · dwt listing · CWE-79 | Orta5,4 | — | %0,3 | 8 Şub 2025 |
21İzleyin | CVE-2024-12855İstismar yok | AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletionscriptsbundle · adforest · CWE-862 | Orta5,4 | — | %0,3 | 8 Oca 2025 |
- CVE-2024-1134939İzleyin
AdForest <= 5.1.6 - Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1scriptsbundle · adforest21 Ara 2024
- CVE-2024-1285739İzleyin
AdForest <= 5.1.8 - Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1scriptsbundle · adforest22 Oca 2025
- CVE-2024-1135039İzleyin
AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover
KritikCVSS 9,8İstismar yokEPSS %1scriptsbundle · adforest8 Oca 2025
- CVE-2019-1587021İzleyin
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
OrtaCVSS 5,4İstismar yokEPSS %1scriptsbundle · carspot3 Eyl 2019
- CVE-2025-016921İzleyin
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0scriptsbundle · dwt listing8 Şub 2025
- CVE-2024-1285521İzleyin
AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion
OrtaCVSS 5,4İstismar yokEPSS %0scriptsbundle · adforest8 Oca 2025