simple-membership-plugin kayıtları
simple-membership-plugin üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %23,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-269 Improper Privilege Management3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-287 Improper Authentication1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-2317İstismar yok | Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalationsimple-membership-plugin · simple membership · CWE-269 | Kritik9,8 | — | %1,4 | 1 Ağu 2022 |
39İzleyin | CVE-2023-41957İstismar yok | WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerabilitysimple-membership-plugin · simple membership · CWE-269 | Kritik9,8 | — | %0,8 | 17 May 2024 |
36İzleyin | CVE-2019-14328Kavram kanıtı | The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.simple-membership-plugin · simple membership · CWE-352 | Yüksek8,8 | — | %3,2 | 28 Tem 2019 |
35İzleyin | CVE-2022-2273İstismar yok | Simple Membership < 4.1.3 - Membership Privilege Escalationsimple-membership-plugin · simple membership · CWE-269 | Yüksek8,8 | — | %1,2 | 1 Ağu 2022 |
35İzleyin | CVE-2023-41956İstismar yok | WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerabilitysimple-membership-plugin · simple membership · CWE-287 | Yüksek8,8 | — | %0,9 | 17 May 2024 |
35İzleyin | CVE-2016-10884İstismar yok | The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.simple-membership-plugin · simple membership · CWE-352 | Yüksek8,8 | — | %0,7 | 14 Ağu 2019 |
30İzleyin | CVE-2024-11088İstismar yok | Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actorsimple-membership-plugin · simple membership · CWE-200 | Yüksek7,5 | — | %0,6 | 21 Kas 2024 |
26İzleyin | CVE-2022-0681İstismar yok | Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRFsimple-membership-plugin · simple membership · CWE-352 | Orta6,5 | — | %0,5 | 21 Mar 2022 |
25İzleyin | CVE-2022-1724Kavram kanıtı | Simple Membership < 4.1.1 - Reflected Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %1,8 | 13 Haz 2022 |
24İzleyin | CVE-2017-18499İstismar yok | The simple-membership plugin before 3.5.7 for WordPress has XSS.simple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %0,9 | 12 Ağu 2019 |
24İzleyin | CVE-2024-1985İstismar yok | Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %0,9 | 13 Mar 2024 |
24İzleyin | CVE-2023-4719İstismar yok | Simple Membership <= 4.3.5 - Reflected Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %0,6 | 5 Eyl 2023 |
24İzleyin | CVE-2023-50376İstismar yok | WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)simple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %0,5 | 19 Ara 2023 |
24İzleyin | CVE-2023-6882İstismar yok | Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_modesimple-membership-plugin · simple membership · CWE-79 | Orta6,1 | — | %0,4 | 11 Oca 2024 |
24İzleyin | CVE-2024-22308İstismar yok | WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirectionsimple-membership-plugin · simple membership · CWE-601 | Orta6,1 | — | %0,3 | 24 Oca 2024 |
24İzleyin | CVE-2024-49682İstismar yok | WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilitysimple-membership-plugin · simple membership · CWE-601 | Orta6,1 | — | %0,3 | 24 Eki 2024 |
21İzleyin | CVE-2022-4469İstismar yok | Simple Membership < 4.2.2 - Contributor+ Stored XSSsimple-membership-plugin · simple membership · CWE-79 | Orta5,4 | — | %0,5 | 16 Oca 2023 |
21İzleyin | CVE-2024-4383İstismar yok | Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodesimple-membership-plugin · simple membership · CWE-79 | Orta5,4 | — | %0,4 | 14 May 2024 |
21İzleyin | CVE-2024-3730İstismar yok | Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodesimple-membership-plugin · simple membership · CWE-79 | Orta5,4 | — | %0,3 | 25 Nis 2024 |
19İzleyin | CVE-2023-0254İstismar yok | Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injectionsimple-membership-plugin · simple membership wp user import · CWE-89 | Orta4,9 | — | %0,9 | 12 Oca 2023 |
18İzleyin | CVE-2022-0328İstismar yok | Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRFsimple-membership-plugin · simple membership · CWE-352 | Orta4,7 | — | %0,5 | 28 Şub 2022 |
- CVE-2022-231739İzleyin
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %1simple-membership-plugin · simple membership1 Ağu 2022
- CVE-2023-4195739İzleyin
WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %1simple-membership-plugin · simple membership17 May 2024
- CVE-2019-1432836İzleyin
The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.
YüksekCVSS 8,8Kavram kanıtıEPSS %3simple-membership-plugin · simple membership28 Tem 2019
- CVE-2022-227335İzleyin
Simple Membership < 4.1.3 - Membership Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %1simple-membership-plugin · simple membership1 Ağu 2022
- CVE-2023-4195635İzleyin
WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1simple-membership-plugin · simple membership17 May 2024
- CVE-2016-1088435İzleyin
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
YüksekCVSS 8,8İstismar yokEPSS %1simple-membership-plugin · simple membership14 Ağu 2019
- CVE-2024-1108830İzleyin
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
YüksekCVSS 7,5İstismar yokEPSS %1simple-membership-plugin · simple membership21 Kas 2024
- CVE-2022-068126İzleyin
Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF
OrtaCVSS 6,5İstismar yokEPSS %1simple-membership-plugin · simple membership21 Mar 2022
- CVE-2022-172425İzleyin
Simple Membership < 4.1.1 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %2simple-membership-plugin · simple membership13 Haz 2022
- CVE-2017-1849924İzleyin
The simple-membership plugin before 3.5.7 for WordPress has XSS.
OrtaCVSS 6,1İstismar yokEPSS %1simple-membership-plugin · simple membership12 Ağu 2019
- CVE-2024-198524İzleyin
Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1simple-membership-plugin · simple membership13 Mar 2024
- CVE-2023-471924İzleyin
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1simple-membership-plugin · simple membership5 Eyl 2023
- CVE-2023-5037624İzleyin
WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0simple-membership-plugin · simple membership19 Ara 2023
- CVE-2023-688224İzleyin
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode
OrtaCVSS 6,1İstismar yokEPSS %0simple-membership-plugin · simple membership11 Oca 2024
- CVE-2024-2230824İzleyin
WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection
OrtaCVSS 6,1İstismar yokEPSS %0simple-membership-plugin · simple membership24 Oca 2024
- CVE-2024-4968224İzleyin
WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0simple-membership-plugin · simple membership24 Eki 2024
- CVE-2022-446921İzleyin
Simple Membership < 4.2.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1simple-membership-plugin · simple membership16 Oca 2023
- CVE-2024-438321İzleyin
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0simple-membership-plugin · simple membership14 May 2024
- CVE-2024-373021İzleyin
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0simple-membership-plugin · simple membership25 Nis 2024
- CVE-2023-025419İzleyin
Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection
OrtaCVSS 4,9İstismar yokEPSS %1simple-membership-plugin · simple membership wp user import12 Oca 2023
- CVE-2022-032818İzleyin
Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
OrtaCVSS 4,7İstismar yokEPSS %0simple-membership-plugin · simple membership28 Şub 2022