slidervilla kayıtları
slidervilla üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2015-9454İstismar yok | The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id paslidervilla · smooth slider · CWE-89 | Yüksek8,8 | — | %1,9 | 7 Eki 2019 |
35İzleyin | CVE-2018-5372İstismar yok | The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).slidervilla · testimonial slider · CWE-89 | Yüksek8,8 | — | %1,2 | 12 Oca 2018 |
35İzleyin | CVE-2018-5373İstismar yok | The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php (trid parameter).slidervilla · smooth slider · CWE-89 | Yüksek8,8 | — | %1,2 | 12 Oca 2018 |
35İzleyin | CVE-2018-5374İstismar yok | The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).slidervilla · dbox slider · CWE-89 | Yüksek8,8 | — | %1,2 | 12 Oca 2018 |
35İzleyin | CVE-2022-44741İstismar yok | WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerabilityslidervilla · testimonial slider · CWE-79 | Yüksek8,8 | — | %0,4 | 8 Kas 2022 |
26İzleyin | CVE-2015-9417İstismar yok | The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.slidervilla · testimonial slider · CWE-352 | Orta6,5 | — | %0,6 | 25 Eyl 2019 |
- CVE-2015-945436İzleyin
The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id pa
YüksekCVSS 8,8İstismar yokEPSS %1slidervilla · smooth slider7 Eki 2019
- CVE-2018-537235İzleyin
The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
YüksekCVSS 8,8İstismar yokEPSS %1slidervilla · testimonial slider12 Oca 2018
- CVE-2018-537335İzleyin
The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php (trid parameter).
YüksekCVSS 8,8İstismar yokEPSS %1slidervilla · smooth slider12 Oca 2018
- CVE-2018-537435İzleyin
The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
YüksekCVSS 8,8İstismar yokEPSS %1slidervilla · dbox slider12 Oca 2018
- CVE-2022-4474135İzleyin
WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0slidervilla · testimonial slider8 Kas 2022
- CVE-2015-941726İzleyin
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
OrtaCVSS 6,5İstismar yokEPSS %0slidervilla · testimonial slider25 Eyl 2019