İçeriğe atla
Noroxi

smashballoon kayıtları

smashballoon üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%30,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2022-33974
    35İzleyin

    WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    smashballoon · custom twitter feeds28 May 2023

  • CVE-2023-52136
    35İzleyin

    WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    smashballoon · custom twitter feeds5 Oca 2024

  • CVE-2024-49685
    35İzleyin

    WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    smashballoon · custom twitter feeds31 Eki 2024

  • CVE-2021-24508
    24İzleyin

    Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS

    OrtaCVSS 6,1İstismar yokEPSS %1

    smashballoon · smash balloon social post feed13 Eyl 2021

  • CVE-2021-25065
    21İzleyin

    Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    smashballoon · smash balloon social post feed17 Oca 2022

  • CVE-2021-24918
    21İzleyin

    Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    smashballoon · smash balloon social post feed29 Kas 2021

  • CVE-2023-4841
    21İzleyin

    Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    smashballoon · feeds for youtube13 Eyl 2023

  • CVE-2022-4477
    21İzleyin

    Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    smashballoon · smash balloon social post feed16 Oca 2023

  • CVE-2024-6256
    21İzleyin

    Feeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    smashballoon · feeds for youtube11 Tem 2024

  • CVE-2024-8983
    19İzleyin

    Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    smashballoon · custom twitter feeds8 Eki 2024

  • CVE-2024-0379
    17İzleyin

    Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    smashballoon · custom twitter feeds28 Şub 2024

  • CVE-2024-8199
    17İzleyin

    Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Missing Authorization to Authenticated (Subscri

    OrtaCVSS 4,3İstismar yokEPSS %0

    smashballoon · reviews feed27 Ağu 2024

  • CVE-2024-8200
    17İzleyin

    Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery

    OrtaCVSS 4,3İstismar yokEPSS %0

    smashballoon · reviews feed27 Ağu 2024