tickera kayıtları
tickera üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %42,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-35729İstismar yok | WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerabilitytickera · tickera · CWE-862 | Yüksek8,8 | — | %0,3 | 10 Haz 2024 |
29İzleyin | CVE-2024-10263İstismar yok | Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Executiontickera · tickera · CWE-94 | Yüksek7,3 | — | %0,5 | 5 Kas 2024 |
24İzleyin | CVE-2021-24797İstismar yok | Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scriptingtickera · tickera · CWE-79 | Orta6,1 | — | %1,2 | 27 Ara 2021 |
24İzleyin | CVE-2023-41861İstismar yok | WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)tickera · restrict · CWE-79 | Orta6,1 | — | %0,4 | 27 Eyl 2023 |
21İzleyin | CVE-2023-7252İstismar yok | Tickera < 3.5.2.5 - Ticket leakage through IDORtickera · tickera · CWE-639 | Orta5,3 | — | %0,5 | 22 Nis 2024 |
17İzleyin | CVE-2022-4549İstismar yok | Tickera < 3.5.1.0 - Plugin Data Deletion via CSRFtickera · tickera · CWE-352 | Orta4,3 | — | %0,3 | 16 Oca 2023 |
17İzleyin | CVE-2024-5860İstismar yok | Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletiontickera · tickera · CWE-862 | Orta4,3 | — | %0,3 | 18 Haz 2024 |
- CVE-2024-3572935İzleyin
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0tickera · tickera10 Haz 2024
- CVE-2024-1026329İzleyin
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
YüksekCVSS 7,3İstismar yokEPSS %1tickera · tickera5 Kas 2024
- CVE-2021-2479724İzleyin
Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1tickera · tickera27 Ara 2021
- CVE-2023-4186124İzleyin
WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0tickera · restrict27 Eyl 2023
- CVE-2023-725221İzleyin
Tickera < 3.5.2.5 - Ticket leakage through IDOR
OrtaCVSS 5,3İstismar yokEPSS %1tickera · tickera22 Nis 2024
- CVE-2022-454917İzleyin
Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
OrtaCVSS 4,3İstismar yokEPSS %0tickera · tickera16 Oca 2023
- CVE-2024-586017İzleyin
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
OrtaCVSS 4,3İstismar yokEPSS %0tickera · tickera18 Haz 2024