İçeriğe atla
Noroxi

tipsandtricks-hq kayıtları

tipsandtricks-hq üreticisine ait 78 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%39,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

78 kayıt
  • CVE-2016-10888
    40Planlayın

    The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.

    KritikCVSS 9,8İstismar yokEPSS %1

    tipsandtricks-hq · all in one wp security \& firewall14 Ağu 2019

  • CVE-2016-10887
    40Planlayın

    The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.

    KritikCVSS 9,8İstismar yokEPSS %1

    tipsandtricks-hq · all in one wp security \& firewall14 Ağu 2019

  • CVE-2015-9310
    40Planlayın

    The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.

    KritikCVSS 9,8İstismar yokEPSS %1

    tipsandtricks-hq · all in one wp security \& firewall14 Ağu 2019

  • CVE-2022-47588
    39İzleyin

    WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    tipsandtricks-hq · simple photo gallery3 Kas 2023

  • CVE-2021-24693
    36İzleyin

    Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail

    KritikCVSS 9,0İstismar yokEPSS %1

    tipsandtricks-hq · simple download monitor8 Kas 2021

  • CVE-2020-5651
    35İzleyin

    SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a spe

    YüksekCVSS 8,8İstismar yokEPSS %1

    tipsandtricks-hq · simple download monitor21 Eki 2020

  • CVE-2021-20782
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the au

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · software license manager13 Tem 2021

  • CVE-2019-5993
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · category specific rss feed subscription12 Eyl 2019

  • CVE-2021-24711
    35İzleyin

    Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · software license manager11 Eki 2021

  • CVE-2024-5080
    35İzleyin

    WP eMember < 10.6.6 - Admin+ Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · wp emember13 Tem 2024

  • CVE-2021-24696
    35İzleyin

    Simple Download Monitor < 3.9.9 - Multiple CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · simple download monitor24 Oca 2022

  • CVE-2024-6075
    35İzleyin

    WP eStore < 8.5.5 - Coupon Deletion via CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · wp estore15 Tem 2024

  • CVE-2024-5076
    35İzleyin

    WP eMember < 10.6.6 - Bulk Delete via CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · wp emember13 Tem 2024

  • CVE-2022-44737
    35İzleyin

    WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · all in one wp security \& firewall22 Kas 2022

  • CVE-2023-22691
    35İzleyin

    WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    tipsandtricks-hq · category specific rss feed subscription3 May 2023

  • CVE-2024-4749
    33İzleyin

    WP eMember < 10.3.9 - Reflected XSS

    YüksekCVSS 8,3İstismar yokEPSS %0

    tipsandtricks-hq · wp emember4 Haz 2024

  • CVE-2021-24695
    31İzleyin

    Simple Download Monitor < 3.9.6 - Unauthenticated Log Access

    YüksekCVSS 7,5İstismar yokEPSS %1

    tipsandtricks-hq · simple download monitor8 Kas 2021

  • CVE-2024-5715
    28İzleyin

    WP eMember < 10.6.7 - Reflected XSS via Member Edit

    YüksekCVSS 7,1İstismar yokEPSS %0

    tipsandtricks-hq · wp emember13 Tem 2024

  • CVE-2024-5287
    28İzleyin

    WP Affiliate Platform < 6.5.1 - Profile Update via CSRF

    YüksekCVSS 7,1İstismar yokEPSS %0

    tipsandtricks-hq · wp affiliate platform13 Tem 2024

  • CVE-2013-2705
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote a

    OrtaCVSS 6,8İstismar yokEPSS %1

    tipsandtricks-hq · wordpress simple paypal shopping cart13 May 2014

  • CVE-2024-5744
    27İzleyin

    WP eMember < 10.6.7 - Reflected XSS

    OrtaCVSS 6,8İstismar yokEPSS %0

    tipsandtricks-hq · wp emember13 Tem 2024

  • CVE-2024-5284
    27İzleyin

    WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF

    OrtaCVSS 6,8İstismar yokEPSS %0

    tipsandtricks-hq · wp affiliate platform13 Tem 2024

  • CVE-2024-5077
    27İzleyin

    WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF

    OrtaCVSS 6,8İstismar yokEPSS %0

    tipsandtricks-hq · wp emember13 Tem 2024

  • CVE-2021-24692
    26İzleyin

    Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal

    OrtaCVSS 6,5İstismar yokEPSS %1

    tipsandtricks-hq · simple download monitor14 Mar 2022

  • CVE-2021-24735
    26İzleyin

    Compact WP Audio Player < 1.9.7 - Setting Change via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    tipsandtricks-hq · compact wp audio player18 Eki 2021