Supsystic kayıtları
supsystic üreticisine ait 43 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)17
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-862 Missing Authorization4
- CWE-82 Improper Neutralization of Script in Attributes of IMG Tags in a Web Page2
- CWE-276 Incorrect Default Permissions2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
43 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-3186İstismar yok | Supsystic Popup < 1.10.19 - Prototype Pollutionsupsystic · popup · CWE-1321 | Kritik9,8 | — | %1,4 | 17 Tem 2023 |
39İzleyin | CVE-2023-39997İstismar yok | WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerabilitysupsystic · popup · CWE-862 | Kritik9,8 | — | %0,6 | 13 Ara 2024 |
39İzleyin | CVE-2023-51353İstismar yok | WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerabilitysupsystic · popup · CWE-862 | Kritik9,8 | — | %0,5 | 9 Ara 2024 |
36İzleyin | CVE-2024-48042İstismar yok | WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerabilitysupsystic · contact form by supsystic · CWE-82 | Kritik9,1 | — | %1,1 | 16 Eki 2024 |
36İzleyin | CVE-2024-52434İstismar yok | WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerabilitysupsystic · popup · CWE-82 | Kritik9,1 | — | %1,1 | 18 Kas 2024 |
35İzleyin | CVE-2020-12075İstismar yok | The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.supsystic · data tables generator · CWE-276 | Yüksek8,8 | — | %1,0 | 22 Nis 2020 |
35İzleyin | CVE-2022-33960İstismar yok | WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilitiessupsystic · social share buttons · CWE-89 | Yüksek8,8 | — | %0,9 | 22 Tem 2022 |
35İzleyin | CVE-2022-27235İstismar yok | WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilitiessupsystic · social share buttons · CWE-264 | Yüksek8,8 | — | %0,9 | 22 Tem 2022 |
35İzleyin | CVE-2020-12076İstismar yok | The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.supsystic · data tables generator · CWE-352 | Yüksek8,8 | — | %0,6 | 22 Nis 2020 |
35İzleyin | CVE-2016-10918İstismar yok | The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.supsystic · photo gallery · CWE-352 | Yüksek8,8 | — | %0,6 | 22 Ağu 2019 |
35İzleyin | CVE-2020-9394İstismar yok | An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.supsystic · pricing table by supsystic · CWE-352 | Yüksek8,8 | — | %0,6 | 25 Şub 2020 |
35İzleyin | CVE-2016-10915İstismar yok | The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.supsystic · popup · CWE-352 | Yüksek8,8 | — | %0,6 | 20 Ağu 2019 |
35İzleyin | CVE-2017-18512İstismar yok | The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.supsystic · newsletter by supsystic · CWE-352 | Yüksek8,8 | — | %0,6 | 14 Ağu 2019 |
35İzleyin | CVE-2024-47330İstismar yok | Broken Access Control vulnerability on multiple WordPress plugins by Supsysticsupsystic · slider · CWE-862 | Yüksek8,8 | — | %0,3 | 25 Eyl 2024 |
35İzleyin | CVE-2023-2528İstismar yok | Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX actionsupsystic · contact form · CWE-352 | Yüksek8,8 | — | %0,3 | 16 May 2023 |
35İzleyin | CVE-2022-47155İstismar yok | WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)supsystic · slider · CWE-352 | Yüksek8,8 | — | %0,2 | 14 Mar 2023 |
35İzleyin | CVE-2023-5756İstismar yok | Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX actionsupsystic · digital publications by supsystic · CWE-352 | Yüksek8,8 | — | %0,2 | 9 Ara 2023 |
35İzleyin | CVE-2023-22714İstismar yok | WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)supsystic · coming soon · CWE-352 | Yüksek8,8 | — | %0,2 | 22 May 2023 |
35İzleyin | CVE-2023-45068İstismar yok | WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)supsystic · contact form · CWE-352 | Yüksek8,8 | — | %0,2 | 12 Eki 2023 |
35İzleyin | CVE-2023-33926İstismar yok | WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)supsystic · easy google maps · CWE-352 | Yüksek8,8 | — | %0,2 | 28 May 2023 |
35İzleyin | CVE-2024-31269İstismar yok | WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerabilitysupsystic · easy google maps · CWE-352 | Yüksek8,8 | — | %0,2 | 12 Nis 2024 |
30İzleyin | CVE-2020-9392İstismar yok | An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.supsystic · pricing table by supsystic · CWE-276 | Yüksek7,3 | — | %1,6 | 23 Mar 2020 |
29İzleyin | CVE-2021-24275Kavram kanıtı | Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)supsystic · popup · CWE-79 | Orta6,1 | — | %18,1 | 5 May 2021 |
29İzleyin | CVE-2021-24274Kavram kanıtı | Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)supsystic · ultimate maps · CWE-79 | Orta6,1 | — | %17,6 | 5 May 2021 |
29İzleyin | CVE-2021-24276Kavram kanıtı | Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)supsystic · contact form · CWE-79 | Orta6,1 | — | %16,0 | 5 May 2021 |
- CVE-2023-318639İzleyin
Supsystic Popup < 1.10.19 - Prototype Pollution
KritikCVSS 9,8İstismar yokEPSS %1supsystic · popup17 Tem 2023
- CVE-2023-3999739İzleyin
WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0supsystic · popup13 Ara 2024
- CVE-2023-5135339İzleyin
WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0supsystic · popup9 Ara 2024
- CVE-2024-4804236İzleyin
WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
KritikCVSS 9,1İstismar yokEPSS %1supsystic · contact form by supsystic16 Eki 2024
- CVE-2024-5243436İzleyin
WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
KritikCVSS 9,1İstismar yokEPSS %1supsystic · popup18 Kas 2024
- CVE-2020-1207535İzleyin
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.
YüksekCVSS 8,8İstismar yokEPSS %1supsystic · data tables generator22 Nis 2020
- CVE-2022-3396035İzleyin
WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · social share buttons22 Tem 2022
- CVE-2022-2723535İzleyin
WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · social share buttons22 Tem 2022
- CVE-2020-1207635İzleyin
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · data tables generator22 Nis 2020
- CVE-2016-1091835İzleyin
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · photo gallery22 Ağu 2019
- CVE-2020-939435İzleyin
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · pricing table by supsystic25 Şub 2020
- CVE-2016-1091535İzleyin
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · popup20 Ağu 2019
- CVE-2017-1851235İzleyin
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · newsletter by supsystic14 Ağu 2019
- CVE-2024-4733035İzleyin
Broken Access Control vulnerability on multiple WordPress plugins by Supsystic
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · slider25 Eyl 2024
- CVE-2023-252835İzleyin
Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · contact form16 May 2023
- CVE-2022-4715535İzleyin
WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · slider14 Mar 2023
- CVE-2023-575635İzleyin
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · digital publications by supsystic9 Ara 2023
- CVE-2023-2271435İzleyin
WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · coming soon22 May 2023
- CVE-2023-4506835İzleyin
WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · contact form12 Eki 2023
- CVE-2023-3392635İzleyin
WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · easy google maps28 May 2023
- CVE-2024-3126935İzleyin
WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0supsystic · easy google maps12 Nis 2024
- CVE-2020-939230İzleyin
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.
YüksekCVSS 7,3İstismar yokEPSS %1supsystic · pricing table by supsystic23 Mar 2020
- CVE-2021-2427529İzleyin
Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %18supsystic · popup5 May 2021
- CVE-2021-2427429İzleyin
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %17supsystic · ultimate maps5 May 2021
- CVE-2021-2427629İzleyin
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %16supsystic · contact form5 May 2021