İçeriğe atla
Noroxi

smartypantsplugins kayıtları

smartypantsplugins üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %6,7
Pre-auth RCE
1
Düzeltme kaydı olan
%20
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2021-24347
    51Planlayın

    SP Project & Document Manager <2 4.22 - Authenticated Shell Upload

    YüksekCVSS 8,8SilahlaştırılmışEPSS %54

    smartypantsplugins · sp project \& document manager14 Haz 2021

  • CVE-2021-4225
    36İzleyin

    SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload

    YüksekCVSS 8,8İstismar yokEPSS %2

    smartypantsplugins · sp project \& document manager25 Nis 2022

  • CVE-2023-3063
    35İzleyin

    SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

    YüksekCVSS 8,8İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager29 Haz 2023

  • CVE-2023-36677
    35İzleyin

    WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager3 Kas 2023

  • CVE-2024-24868
    35İzleyin

    WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager28 Şub 2024

  • CVE-2014-9178
    31İzleyin

    Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-docum

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    smartypantsplugins · sp project \& document manager2 Ara 2014

  • CVE-2021-38324
    31İzleyin

    SP Rental Manager <= 1.5.3 Unauthenticated SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %2

    smartypantsplugins · sp rental manager9 Eyl 2021

  • CVE-2022-1551
    26İzleyin

    SP Project & Document Manager < 4.58 - Sensitive File Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager25 Tem 2022

  • CVE-2024-37224
    26İzleyin

    WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager9 Tem 2024

  • CVE-2024-3749
    26İzleyin

    SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR

    OrtaCVSS 6,5İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager15 May 2024

  • CVE-2024-3748
    26İzleyin

    SP Project & Document Manager <= 4.71 - Data Update via IDOR

    OrtaCVSS 6,5İstismar yokEPSS %0

    smartypantsplugins · sp project \& document manager15 May 2024

  • CVE-2021-38315
    24İzleyin

    SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager16 Ağu 2021

  • CVE-2022-34857
    24İzleyin

    WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %1

    smartypantsplugins · sp project \& document manager22 Ağu 2022

  • CVE-2023-36530
    19İzleyin

    WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    smartypantsplugins · sp project \& document manager10 Ağu 2023

  • CVE-2013-3529
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    wordpress · wordpress10 May 2013