İçeriğe atla
Noroxi

themekraft kayıtları

themekraft üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%47,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2023-26326
    40Planlayın

    The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    themekraft · buddyforms23 Şub 2023

  • CVE-2018-21003
    40Planlayın

    The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    themekraft · buddyforms27 Ağu 2019

  • CVE-2025-32151
    35İzleyin

    WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · buddyforms4 Nis 2025

  • CVE-2024-2025
    35İzleyin

    BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_reques

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · buddypress woocommerce my account integration. create woocommerce member pages22 Mar 2024

  • CVE-2024-32603
    35İzleyin

    WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · buddypress woocommerce my account integration18 Nis 2024

  • CVE-2024-8246
    35İzleyin

    Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Priv

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · buddyforms14 Eyl 2024

  • CVE-2024-35726
    35İzleyin

    WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · buddypress woocommerce my account integration. create woocommerce member pages10 Haz 2024

  • CVE-2023-5823
    35İzleyin

    WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    themekraft · tk google fonts gdpr compliant6 Kas 2023

  • CVE-2024-1170
    32İzleyin

    Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthent

    YüksekCVSS 8,2İstismar yokEPSS %0

    themekraft · post form7 Mar 2024

  • CVE-2024-32830
    30İzleyin

    WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    themekraft · buddyforms17 May 2024

  • CVE-2024-1169
    30İzleyin

    Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthent

    YüksekCVSS 7,5İstismar yokEPSS %0

    themekraft · post form7 Mar 2024

  • CVE-2024-30198
    24İzleyin

    WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    themekraft · buddyforms27 Mar 2024

  • CVE-2022-38971
    21İzleyin

    WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    themekraft · post form registration form profile form for user profiles and content forms16 Mar 2023

  • CVE-2024-5149
    21İzleyin

    BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness

    OrtaCVSS 5,3İstismar yokEPSS %0

    themekraft · buddyforms5 Haz 2024

  • CVE-2023-25981
    21İzleyin

    WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    themekraft · post form25 Ağu 2023

  • CVE-2024-47377
    21İzleyin

    WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    themekraft · buddyforms5 Eki 2024

  • CVE-2024-12038
    21İzleyin

    Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    themekraft · buddyforms22 Şub 2025

  • CVE-2025-62973
    21İzleyin

    WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    themekraft · buddyforms27 Eki 2025

  • CVE-2024-1158
    17İzleyin

    Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization

    OrtaCVSS 4,3İstismar yokEPSS %0

    themekraft · buddyforms13 Mar 2024

  • CVE-2025-1780
    17İzleyin

    BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update

    OrtaCVSS 4,3İstismar yokEPSS %0

    themekraft · buddypress woocommerce my account integration1 Mar 2025

  • CVE-2024-13358
    17İzleyin

    BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings

    OrtaCVSS 4,3İstismar yokEPSS %0

    themekraft · buddypress woocommerce my account integration1 Mar 2025