tagDiv kayıtları
tagdiv üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-269 Improper Privilege Management2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2016-10972Kavram kanıtı | The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.tagdiv · newspaper · CWE-269 | Kritik9,8 | — | %9,3 | 16 Eyl 2019 |
40Planlayın | CVE-2017-18634İstismar yok | The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.tagdiv · newspaper · CWE-74 | Kritik9,8 | — | %2,2 | 16 Eyl 2019 |
35İzleyin | CVE-2024-3813İstismar yok | tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcodetagdiv · tagdiv composer · CWE-98 | Yüksek8,8 | — | %0,7 | 14 Haz 2024 |
35İzleyin | CVE-2023-1597İstismar yok | tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalationtagdiv · cloud library · CWE-269 | Yüksek8,8 | — | %0,5 | 10 Tem 2023 |
28İzleyin | CVE-2023-3416İstismar yok | tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injectiontagdiv · tagdiv opt-in builder · CWE-89 | Yüksek7,2 | — | %0,6 | 17 Ağu 2024 |
28İzleyin | CVE-2023-3419İstismar yok | tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injectiontagdiv · tagdiv opt-in builder · CWE-89 | Yüksek7,2 | — | %0,6 | 17 Ağu 2024 |
24İzleyin | CVE-2023-3169Kavram kanıtı | tagDiv Composer < 4.2 - Unauthenticated Stored XSStagdiv · tagdiv composer · CWE-79 | Orta6,1 | — | %1,3 | 11 Eyl 2023 |
24İzleyin | CVE-2021-24304İstismar yok | Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)tagdiv · newsmag · CWE-79 | Orta6,1 | — | %1,2 | 9 Ağu 2021 |
24İzleyin | CVE-2022-2627Kavram kanıtı | Newspaper < 12 - Reflected Cross-Site Scriptingtagdiv · newspaper · CWE-79 | Orta6,1 | — | %1,0 | 31 Eki 2022 |
24İzleyin | CVE-2021-3135İstismar yok | An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress.tagdiv · newspaper · CWE-79 | Orta6,1 | — | %0,8 | 19 Tem 2021 |
24İzleyin | CVE-2022-2167İstismar yok | Newspaper < 12 - Reflected Cross-Site Scriptingtagdiv · newspaper · CWE-79 | Orta6,1 | — | %0,6 | 31 Eki 2022 |
24İzleyin | CVE-2023-1596İstismar yok | tagDiv Composer < 4.0 - Reflected Cross-site Scriptingtagdiv · composer · CWE-79 | Orta6,1 | — | %0,5 | 15 May 2023 |
24İzleyin | CVE-2024-3886İstismar yok | tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagdiv · tagdiv composer · CWE-79 | Orta6,1 | — | %0,4 | 31 Ağu 2024 |
24İzleyin | CVE-2024-5212İstismar yok | tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagdiv · tagdiv composer · CWE-79 | Orta6,1 | — | %0,4 | 31 Ağu 2024 |
24İzleyin | CVE-2025-2806İstismar yok | tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'tagdiv · tagdiv composer · CWE-79 | Orta6,1 | — | %0,3 | 8 May 2025 |
24İzleyin | CVE-2023-39166İstismar yok | WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)tagdiv · tagdiv composer · CWE-352 | Orta6,1 | — | %0,2 | 13 Kas 2023 |
21İzleyin | CVE-2025-3510İstismar yok | tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodestagdiv · composer · CWE-79 | Orta5,4 | — | %0,3 | 2 May 2025 |
19İzleyin | CVE-2023-3170İstismar yok | tagDiv Composer < 4.2 - Admin+ Stored XSStagdiv · tagdiv composer · CWE-79 | Orta4,8 | — | %0,4 | 11 Eyl 2023 |
19İzleyin | CVE-2024-3815İstismar yok | Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Metatagdiv · newspaper · CWE-79 | Orta4,8 | — | %0,3 | 14 Haz 2024 |
19İzleyin | CVE-2024-3814İstismar yok | tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Metatagdiv · tagdiv composer · CWE-79 | Orta4,8 | — | %0,3 | 14 Haz 2024 |
- CVE-2016-1097242Planlayın
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
KritikCVSS 9,8Kavram kanıtıEPSS %9tagdiv · newspaper16 Eyl 2019
- CVE-2017-1863440Planlayın
The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.
KritikCVSS 9,8İstismar yokEPSS %2tagdiv · newspaper16 Eyl 2019
- CVE-2024-381335İzleyin
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
YüksekCVSS 8,8İstismar yokEPSS %1tagdiv · tagdiv composer14 Haz 2024
- CVE-2023-159735İzleyin
tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0tagdiv · cloud library10 Tem 2023
- CVE-2023-341628İzleyin
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1tagdiv · tagdiv opt-in builder17 Ağu 2024
- CVE-2023-341928İzleyin
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1tagdiv · tagdiv opt-in builder17 Ağu 2024
- CVE-2023-316924İzleyin
tagDiv Composer < 4.2 - Unauthenticated Stored XSS
OrtaCVSS 6,1Kavram kanıtıEPSS %1tagdiv · tagdiv composer11 Eyl 2023
- CVE-2021-2430424İzleyin
Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %1tagdiv · newsmag9 Ağu 2021
- CVE-2022-262724İzleyin
Newspaper < 12 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1tagdiv · newspaper31 Eki 2022
- CVE-2021-313524İzleyin
An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1tagdiv · newspaper19 Tem 2021
- CVE-2022-216724İzleyin
Newspaper < 12 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1tagdiv · newspaper31 Eki 2022
- CVE-2023-159624İzleyin
tagDiv Composer < 4.0 - Reflected Cross-site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1tagdiv · composer15 May 2023
- CVE-2024-388624İzleyin
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
OrtaCVSS 6,1İstismar yokEPSS %0tagdiv · tagdiv composer31 Ağu 2024
- CVE-2024-521224İzleyin
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
OrtaCVSS 6,1İstismar yokEPSS %0tagdiv · tagdiv composer31 Ağu 2024
- CVE-2025-280624İzleyin
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
OrtaCVSS 6,1İstismar yokEPSS %0tagdiv · tagdiv composer8 May 2025
- CVE-2023-3916624İzleyin
WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 6,1İstismar yokEPSS %0tagdiv · tagdiv composer13 Kas 2023
- CVE-2025-351021İzleyin
tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
OrtaCVSS 5,4İstismar yokEPSS %0tagdiv · composer2 May 2025
- CVE-2023-317019İzleyin
tagDiv Composer < 4.2 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0tagdiv · tagdiv composer11 Eyl 2023
- CVE-2024-381519İzleyin
Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
OrtaCVSS 4,8İstismar yokEPSS %0tagdiv · newspaper14 Haz 2024
- CVE-2024-381419İzleyin
tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
OrtaCVSS 4,8İstismar yokEPSS %0tagdiv · tagdiv composer14 Haz 2024