Themewinter kayıtları

themewinter üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %54,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
47Planlayın	CVE-2025-47539Kavram kanıtı	WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerabilitythemewinter · eventin · CWE-266 Kimlik doğrulamasız	Kritik9,8	—	%27,9	23 May 2025
41Planlayın	CVE-2025-47445Kavram kanıtı	WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerabilitythemewinter · eventin · CWE-23 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%5,1	14 May 2025
39İzleyin	CVE-2023-47805İstismar yok	WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerabilitythemewinter · wpcafe · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,5	9 Ara 2024
35İzleyin	CVE-2024-7149İstismar yok	Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusionthemewinter · eventin · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%1,0	27 Eyl 2024
35İzleyin	CVE-2025-1770İstismar yok	Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusionthemewinter · eventin · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%0,9	20 Mar 2025
35İzleyin	CVE-2025-26964İstismar yok	WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerabilitythemewinter · eventin · CWE-98	Yüksek8,8	—	%0,8	25 Şub 2025
35İzleyin	CVE-2024-5431İstismar yok	WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcodethemewinter · wpcafe · CWE-98	Yüksek8,8	—	%0,6	25 Haz 2024
35İzleyin	CVE-2025-4796Kavram kanıtı	Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeoverthemewinter · eventin · CWE-639 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,6	8 Ağu 2025
35İzleyin	CVE-2023-49756İstismar yok	WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerabilitythemewinter · eventin · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,6	9 Ara 2024
35İzleyin	CVE-2024-56213İstismar yok	WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerabilitythemewinter · eventin · CWE-35 Yol geçişi	Yüksek8,8	—	%0,6	31 Ara 2024
35İzleyin	CVE-2024-37513İstismar yok	WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerabilitythemewinter · wpcafe · CWE-22 Yol geçişi	Yüksek8,8	—	%0,6	9 Tem 2024
35İzleyin	CVE-2024-43135İstismar yok	WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerabilitythemewinter · wpcafe · CWE-22 Yol geçişi	Yüksek8,8	—	%0,5	13 Ağu 2024
30İzleyin	CVE-2025-39584İstismar yok	WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerabilitythemewinter · eventin · CWE-98	Yüksek7,5	—	%0,9	16 Nis 2025
30İzleyin	CVE-2025-3419Kavram kanıtı	Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Readthemewinter · eventin · CWE-73 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,7	8 May 2025
24İzleyin	CVE-2025-49321İstismar yok	WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerabilitythemewinter · eventin · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	27 Haz 2025
21İzleyin	CVE-2024-1122İstismar yok	Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Exportthemewinter · eventin · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	9 Şub 2024
21İzleyin	CVE-2024-1855İstismar yok	WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgerythemewinter · wpcafe · CWE-918 Kimlik doğrulamasız SSRF	Orta5,3	—	%0,4	22 May 2024
21İzleyin	CVE-2025-1766İstismar yok	Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Updatethemewinter · eventin · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,4	20 Mar 2025
21İzleyin	CVE-2024-5427İstismar yok	WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting themewinter · wpcafe · CWE-79 XSS	Orta5,4	—	%0,3	31 May 2024
21İzleyin	CVE-2024-37507İstismar yok	WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerabilitythemewinter · eventin · CWE-79 XSS	Orta5,4	—	%0,3	21 Tem 2024
19İzleyin	CVE-2024-39648İstismar yok	WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilitythemewinter · eventin · CWE-79 XSS	Orta4,8	—	%0,3	1 Ağu 2024
17İzleyin	CVE-2024-6033İstismar yok	Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Importthemewinter · eventin · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,4	17 Tem 2024

CVE-2025-47539
47Planlayın
WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %28
- Kimlik doğrulamasız
themewinter · eventin23 May 2025
CVE-2025-47445
41Planlayın
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- Yol geçişi
themewinter · eventin14 May 2025
CVE-2023-47805
39İzleyin
WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
themewinter · wpcafe9 Ara 2024
CVE-2024-7149
35İzleyin
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Yol geçişi
themewinter · eventin27 Eyl 2024
CVE-2025-1770
35İzleyin
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Yol geçişi
themewinter · eventin20 Mar 2025
CVE-2025-26964
35İzleyin
WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
themewinter · eventin25 Şub 2025
CVE-2024-5431
35İzleyin
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
YüksekCVSS 8,8İstismar yokEPSS %1
themewinter · wpcafe25 Haz 2024
CVE-2025-4796
35İzleyin
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
YüksekCVSS 8,8Kavram kanıtıEPSS %1
- Erişim denetimi (IDOR)
themewinter · eventin8 Ağu 2025
CVE-2023-49756
35İzleyin
WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
themewinter · eventin9 Ara 2024
CVE-2024-56213
35İzleyin
WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
themewinter · eventin31 Ara 2024
CVE-2024-37513
35İzleyin
WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
themewinter · wpcafe9 Tem 2024
CVE-2024-43135
35İzleyin
WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
themewinter · wpcafe13 Ağu 2024
CVE-2025-39584
30İzleyin
WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
themewinter · eventin16 Nis 2025
CVE-2025-3419
30İzleyin
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
themewinter · eventin8 May 2025
CVE-2025-49321
24İzleyin
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
themewinter · eventin27 Haz 2025
CVE-2024-1122
21İzleyin
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
themewinter · eventin9 Şub 2024
CVE-2024-1855
21İzleyin
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
themewinter · wpcafe22 May 2024
CVE-2025-1766
21İzleyin
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
themewinter · eventin20 Mar 2025
CVE-2024-5427
21İzleyin
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themewinter · wpcafe31 May 2024
CVE-2024-37507
21İzleyin
WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themewinter · eventin21 Tem 2024
CVE-2024-39648
19İzleyin
WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
themewinter · eventin1 Ağu 2024
CVE-2024-6033
17İzleyin
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
themewinter · eventin17 Tem 2024