SeedProd kayıtları
seedprod üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %37,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2024-1072İstismar yok | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lseedprod · website builder by seedprod · CWE-862 | Yüksek7,5 | — | %0,7 | 5 Şub 2024 |
25İzleyin | CVE-2024-4745İstismar yok | WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerabilityseedprod · rafflepress · CWE-862 | Orta6,3 | — | %0,3 | 10 Haz 2024 |
22İzleyin | CVE-2020-15038Kavram kanıtı | The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.seedprod · coming soon page\, under construction \& maintenance mode · CWE-79 | Orta5,4 | — | %3,8 | 24 Haz 2020 |
21İzleyin | CVE-2023-5049İstismar yok | Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeseedprod · rafflepress · CWE-79 | Orta5,4 | — | %0,5 | 30 Eki 2023 |
19İzleyin | CVE-2024-6887İstismar yok | Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSSseedprod · rafflepress · CWE-79 | Orta4,8 | — | %0,4 | 12 Eyl 2024 |
19İzleyin | CVE-2024-10107İstismar yok | Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSSseedprod · rafflepress · CWE-79 | Orta4,8 | — | %0,3 | 15 May 2025 |
19İzleyin | CVE-2024-37556İstismar yok | WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerabilityseedprod · wordpress notification bar · CWE-79 | Orta4,8 | — | %0,3 | 21 Tem 2024 |
17İzleyin | CVE-2023-4975İstismar yok | Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Updateseedprod · website builder by seedprod · CWE-352 | Orta4,3 | — | %0,3 | 20 Eki 2023 |
- CVE-2024-107230İzleyin
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_l
YüksekCVSS 7,5İstismar yokEPSS %1seedprod · website builder by seedprod5 Şub 2024
- CVE-2024-474525İzleyin
WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0seedprod · rafflepress10 Haz 2024
- CVE-2020-1503822İzleyin
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
OrtaCVSS 5,4Kavram kanıtıEPSS %4seedprod · coming soon page\, under construction \& maintenance mode24 Haz 2020
- CVE-2023-504921İzleyin
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0seedprod · rafflepress30 Eki 2023
- CVE-2024-688719İzleyin
Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0seedprod · rafflepress12 Eyl 2024
- CVE-2024-1010719İzleyin
Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0seedprod · rafflepress15 May 2025
- CVE-2024-3755619İzleyin
WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0seedprod · wordpress notification bar21 Tem 2024
- CVE-2023-497517İzleyin
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
OrtaCVSS 4,3İstismar yokEPSS %0seedprod · website builder by seedprod20 Eki 2023