İçeriğe atla
Noroxi

Strategy11 kayıtları

strategy11 üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%34,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2023-2877
    42Planlayın

    Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %22

    strategy11 · formidable forms27 Haz 2023

  • CVE-2022-3254
    41Planlayın

    AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    strategy11 · awp classifieds31 Eki 2022

  • CVE-2019-15780
    40Planlayın

    The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

    KritikCVSS 9,8İstismar yokEPSS %2

    strategy11 · formidable form builder29 Ağu 2019

  • CVE-2021-24884
    39İzleyin

    Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting

    KritikCVSS 9,6Kavram kanıtıEPSS %3

    strategy11 · formidable form builder25 Eki 2021

  • CVE-2022-45806
    39İzleyin

    WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    strategy11 · formidable forms13 Ara 2024

  • CVE-2021-24178
    35İzleyin

    Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

    YüksekCVSS 8,8İstismar yokEPSS %1

    strategy11 · business directory plugin - easy listing directories6 May 2021

  • CVE-2021-24179
    35İzleyin

    Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

    YüksekCVSS 8,8İstismar yokEPSS %1

    strategy11 · business directory plugin - easy listing directories6 May 2021

  • CVE-2024-31350
    35İzleyin

    WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    strategy11 · awp classifieds9 Haz 2024

  • CVE-2023-24419
    35İzleyin

    WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    strategy11 · formidable form builder28 Şub 2023

  • CVE-2023-41801
    35İzleyin

    WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    strategy11 · awp classifieds6 Eki 2023

  • CVE-2014-10013
    31İzleyin

    SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    strategy11 · awp classifieds13 Oca 2015

  • CVE-2023-1405
    30İzleyin

    Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    strategy11 · formidable forms16 Oca 2024

  • CVE-2021-24248
    28İzleyin

    Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

    YüksekCVSS 7,2İstismar yokEPSS %2

    strategy11 · business directory plugin - easy listing directories6 May 2021

  • CVE-2021-24249
    26İzleyin

    Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

    OrtaCVSS 6,5İstismar yokEPSS %1

    strategy11 · business directory plugin - easy listing directories6 May 2021

  • CVE-2024-1290
    26İzleyin

    Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

    OrtaCVSS 6,5İstismar yokEPSS %1

    strategy11 · user registration forms11 Mar 2024

  • CVE-2023-0816
    26İzleyin

    Formidable Forms < 6.1 - IP Spoofing

    OrtaCVSS 6,5İstismar yokEPSS %0

    strategy11 · formidable form builder27 Mar 2023

  • CVE-2017-20192
    24İzleyin

    Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    strategy11 · formidable form builder16 Eki 2024

  • CVE-2024-11188
    24İzleyin

    Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTM

    OrtaCVSS 6,1İstismar yokEPSS %0

    strategy11 · formidable forms23 Kas 2024

  • CVE-2023-6830
    24İzleyin

    Formidable Forms <= 6.7 - HTML Injection

    OrtaCVSS 6,1İstismar yokEPSS %0

    strategy11 · formidable form builder9 Oca 2024

  • CVE-2024-23522
    24İzleyin

    WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    strategy11 · formidable forms17 May 2024

  • CVE-2017-20194
    21İzleyin

    Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    strategy11 · formidable form builder16 Eki 2024

  • CVE-2021-24250
    21İzleyin

    Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    strategy11 · business directory plugin - easy listing directories6 May 2021

  • CVE-2024-6725
    21İzleyin

    Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    strategy11 · formidable forms31 Tem 2024

  • CVE-2021-24608
    19İzleyin

    Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    strategy11 · formidable form builder25 Eki 2021

  • CVE-2024-9768
    19İzleyin

    Formidable Forms < 6.14.1 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    strategy11 · formidable forms21 Kas 2024