themelooks kayıtları
themelooks üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-9307İstismar yok | mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Filesthemelooks · mfolio · CWE-434 | Yüksek8,8 | — | %0,9 | 6 Kas 2024 |
21İzleyin | CVE-2024-3680İstismar yok | Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tagthemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,4 | 14 May 2024 |
21İzleyin | CVE-2024-3831İstismar yok | Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widgetthemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,4 | 14 May 2024 |
21İzleyin | CVE-2024-56252İstismar yok | WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerabilitythemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,3 | 2 Oca 2025 |
21İzleyin | CVE-2024-7611İstismar yok | Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widgetthemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,3 | 6 Eyl 2024 |
21İzleyin | CVE-2024-37263İstismar yok | WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilitythemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,2 | 22 Tem 2024 |
21İzleyin | CVE-2024-47625İstismar yok | WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilitythemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,2 | 5 Eki 2024 |
21İzleyin | CVE-2024-43225İstismar yok | WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerabilitythemelooks · enter addons · CWE-79 | Orta5,4 | — | %0,2 | 12 Ağu 2024 |
17İzleyin | CVE-2024-10868İstismar yok | Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosurethemelooks · enter addons · CWE-639 | Orta4,3 | — | %0,4 | 23 Kas 2024 |
- CVE-2024-930735İzleyin
mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
YüksekCVSS 8,8İstismar yokEPSS %0themelooks · mfolio6 Kas 2024
- CVE-2024-368021İzleyin
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons14 May 2024
- CVE-2024-383121İzleyin
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons14 May 2024
- CVE-2024-5625221İzleyin
WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons2 Oca 2025
- CVE-2024-761121İzleyin
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons6 Eyl 2024
- CVE-2024-3726321İzleyin
WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons22 Tem 2024
- CVE-2024-4762521İzleyin
WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons5 Eki 2024
- CVE-2024-4322521İzleyin
WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0themelooks · enter addons12 Ağu 2024
- CVE-2024-1086817İzleyin
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure
OrtaCVSS 4,3İstismar yokEPSS %0themelooks · enter addons23 Kas 2024