İçeriğe atla
Noroxi

strangerstudios kayıtları

strangerstudios üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3,8
Pre-auth RCE
0
Düzeltme kaydı olan
%38,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2023-23488
    67Bu hafta

    The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' para

    KritikCVSS 9,8SilahlaştırılmışEPSS %92

    strangerstudios · paid memberships pro20 Oca 2023

  • CVE-2021-25114
    64Bu hafta

    Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %82

    strangerstudios · paid memberships pro7 Şub 2022

  • CVE-2023-0631
    53Planlayın

    Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %60

    strangerstudios · paid memberships pro20 Mar 2023

  • CVE-2023-6187
    50Planlayın

    Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %51

    strangerstudios · paid memberships pro17 Kas 2023

  • CVE-2022-4830
    41Planlayın

    Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %65

    strangerstudios · paid memberships pro13 Şub 2023

  • CVE-2024-37277
    39İzleyin

    WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    strangerstudios · paid memberships pro1 Kas 2024

  • CVE-2021-20678
    36İzleyin

    SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary S

    YüksekCVSS 8,8İstismar yokEPSS %2

    strangerstudios · paid memberships pro17 Mar 2021

  • CVE-2023-39990
    35İzleyin

    WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    strangerstudios · paid memberships pro19 Haz 2024

  • CVE-2023-28419
    35İzleyin

    WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    strangerstudios · force display name12 Kas 2023

  • CVE-2024-32794
    35İzleyin

    WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    strangerstudios · paid memberships pro24 Nis 2024

  • CVE-2024-32793
    35İzleyin

    WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    strangerstudios · paid memberships pro24 Nis 2024

  • CVE-2020-5579
    28İzleyin

    SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary S

    YüksekCVSS 7,2İstismar yokEPSS %1

    strangerstudios · paid memberships pro20 May 2020

  • CVE-2024-37486
    28İzleyin

    WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    strangerstudios · paid memberships pro9 Tem 2024

  • CVE-2024-1287
    26İzleyin

    Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

    OrtaCVSS 6,5İstismar yokEPSS %1

    strangerstudios · paid memberships pro30 Tem 2024

  • CVE-2014-8801
    25İzleyin

    Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attac

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    strangerstudios · paid memberships pro28 Kas 2014

  • CVE-2015-5532
    25İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin before 1.8.4.3 for WordPress allow remote att

    OrtaCVSS 6,1İstismar yokEPSS %2

    strangerstudios · paid memberships pro23 Eki 2017

  • CVE-2021-24979
    25İzleyin

    Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    strangerstudios · paid memberships pro27 Ara 2021

  • CVE-2024-0624
    21İzleyin

    Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    strangerstudios · paid memberships pro24 Oca 2024

  • CVE-2023-6855
    21İzleyin

    Paid Memberships Pro <= 2.12.5 - Missing Authorization via API

    OrtaCVSS 5,3İstismar yokEPSS %1

    strangerstudios · paid memberships pro11 Oca 2024

  • CVE-2023-5237
    21İzleyin

    Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    strangerstudios · memberlite shortcodes31 Eki 2023

  • CVE-2024-1407
    21İzleyin

    Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification

    OrtaCVSS 5,4İstismar yokEPSS %0

    strangerstudios · paid memberships pro19 Haz 2024

  • CVE-2024-1286
    19İzleyin

    Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure

    OrtaCVSS 4,9İstismar yokEPSS %1

    strangerstudios · paid memberships pro30 Tem 2024

  • CVE-2024-0588
    17İzleyin

    Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    strangerstudios · paid memberships pro9 Nis 2024

  • CVE-2024-1279
    17İzleyin

    Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure

    OrtaCVSS 4,3İstismar yokEPSS %1

    strangerstudios · paid memberships pro11 Mar 2024

  • CVE-2020-36754
    17İzleyin

    Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass

    OrtaCVSS 4,3İstismar yokEPSS %0

    strangerstudios · paid memberships pro20 Eki 2023