İçeriğe atla
Noroxi

ThemePunch kayıtları

themepunch üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %5,9
Pre-auth RCE
1
Düzeltme kaydı olan
%47,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2014-9735
    53Planlayın

    The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    themepunch · showbiz pro30 Haz 2015

  • CVE-2015-9499
    44Planlayın

    The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    themepunch · showbiz pro22 Eki 2019

  • CVE-2023-2359
    36İzleyin

    Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %3

    themepunch · slider revolution19 Haz 2023

  • CVE-2023-6528
    35İzleyin

    Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE

    YüksekCVSS 8,8İstismar yokEPSS %1

    themepunch · slider revolution8 Oca 2024

  • CVE-2023-47784
    35İzleyin

    WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    themepunch · slider revolution20 Ara 2023

  • CVE-2024-34444
    35İzleyin

    WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    themepunch · slider revolution19 Haz 2024

  • CVE-2023-47771
    33İzleyin

    WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

    YüksekCVSS 8,3İstismar yokEPSS %0

    themepunch ohg · essential grid19 Haz 2024

  • CVE-2014-9734
    26İzleyin

    Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbit

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    themepunch · slider revolution30 Haz 2015

  • CVE-2023-47684
    24İzleyin

    WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    themepunch · essential grid13 Kas 2023

  • CVE-2024-4092
    21İzleyin

    Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution2 May 2024

  • CVE-2023-47772
    21İzleyin

    WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution20 Kas 2023

  • CVE-2024-8107
    21İzleyin

    Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution1 Eki 2024

  • CVE-2024-34443
    21İzleyin

    WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution19 Haz 2024

  • CVE-2024-4581
    21İzleyin

    Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution4 Haz 2024

  • CVE-2024-4637
    21İzleyin

    Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex

    OrtaCVSS 5,4İstismar yokEPSS %0

    themepunch · slider revolution4 Haz 2024

  • CVE-2024-37449
    19İzleyin

    WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 4,8İstismar yokEPSS %0

    themepunch · slider revolution21 Tem 2024

  • CVE-2015-5151
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject a

    OrtaCVSS 4,3İstismar yokEPSS %2

    themepunch · slider revolution30 Haz 2015