softlabbd kayıtları
softlabbd üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %54,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-35670İstismar yok | WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerabilitysoftlabbd · integrate google drive · CWE-287 | Kritik9,8 | — | %0,4 | 4 Haz 2024 |
39İzleyin | CVE-2024-35661İstismar yok | WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerabilitysoftlabbd · upload fields for wpforms · CWE-862 | Kritik9,8 | — | %0,4 | 9 Haz 2024 |
35İzleyin | CVE-2023-49769İstismar yok | WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)softlabbd · integrate google drive · CWE-352 | Yüksek8,8 | — | %0,3 | 17 Ara 2023 |
25İzleyin | CVE-2023-52177İstismar yok | WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerabilitysoftlabbd · integrate google drive · CWE-862 | Orta6,3 | — | %0,3 | 12 Haz 2024 |
24İzleyin | CVE-2023-47548İstismar yok | WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirectionsoftlabbd · integrate google drive · CWE-601 | Orta6,1 | — | %0,4 | 7 Ara 2023 |
21İzleyin | CVE-2023-4024İstismar yok | Radio Player <= 2.0.73 - Missing Authorization to Player Deletionsoftlabbd · radio player · CWE-862 | Orta5,3 | — | %0,5 | 17 Ağu 2024 |
21İzleyin | CVE-2023-4027İstismar yok | Radio Player <= 2.0.73 - Missing Authorization to Settings Updatesoftlabbd · radio player · CWE-862 | Orta5,3 | — | %0,4 | 17 Ağu 2024 |
21İzleyin | CVE-2023-4025İstismar yok | Radio Player <= 2.0.73 - Missing Authorization to Player Updatesoftlabbd · radio player · CWE-862 | Orta5,3 | — | %0,4 | 17 Ağu 2024 |
21İzleyin | CVE-2024-8267İstismar yok | Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align softlabbd · radio player · CWE-79 | Orta5,4 | — | %0,3 | 24 Eyl 2024 |
21İzleyin | CVE-2024-34753İstismar yok | WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerabilitysoftlabbd · radio player · CWE-862 | Orta5,3 | — | %0,3 | 11 Haz 2024 |
21İzleyin | CVE-2024-29811İstismar yok | WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerabilitysoftlabbd · radio player · CWE-79 | Orta5,4 | — | %0,3 | 27 Mar 2024 |
- CVE-2024-3567039İzleyin
WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0softlabbd · integrate google drive4 Haz 2024
- CVE-2024-3566139İzleyin
WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0softlabbd · upload fields for wpforms9 Haz 2024
- CVE-2023-4976935İzleyin
WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0softlabbd · integrate google drive17 Ara 2023
- CVE-2023-5217725İzleyin
WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0softlabbd · integrate google drive12 Haz 2024
- CVE-2023-4754824İzleyin
WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection
OrtaCVSS 6,1İstismar yokEPSS %0softlabbd · integrate google drive7 Ara 2023
- CVE-2023-402421İzleyin
Radio Player <= 2.0.73 - Missing Authorization to Player Deletion
OrtaCVSS 5,3İstismar yokEPSS %1softlabbd · radio player17 Ağu 2024
- CVE-2023-402721İzleyin
Radio Player <= 2.0.73 - Missing Authorization to Settings Update
OrtaCVSS 5,3İstismar yokEPSS %0softlabbd · radio player17 Ağu 2024
- CVE-2023-402521İzleyin
Radio Player <= 2.0.73 - Missing Authorization to Player Update
OrtaCVSS 5,3İstismar yokEPSS %0softlabbd · radio player17 Ağu 2024
- CVE-2024-826721İzleyin
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align
OrtaCVSS 5,4İstismar yokEPSS %0softlabbd · radio player24 Eyl 2024
- CVE-2024-3475321İzleyin
WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0softlabbd · radio player11 Haz 2024
- CVE-2024-2981121İzleyin
WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0softlabbd · radio player27 Mar 2024