tri kayıtları
tri üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %11,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-707 Improper Neutralization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-0381İstismar yok | GigPress <= 2.3.28 - Subscriber+ SQLitri · gigpress · CWE-89 | Yüksek8,8 | — | %1,3 | 27 Şub 2023 |
28İzleyin | CVE-2015-9353İstismar yok | The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.tri · gigpress · CWE-89 | Yüksek7,2 | — | %1,4 | 28 Ağu 2019 |
27İzleyin | CVE-2015-4066Kavram kanıtı | Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated ustri · gigpress · CWE-89 | Orta6,5 | — | %4,2 | 27 May 2015 |
26İzleyin | CVE-2024-1295İstismar yok | The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Accesstri · the events calendar · CWE-639 | Orta6,5 | — | %0,5 | 14 Haz 2024 |
25İzleyin | CVE-2021-25028Kavram kanıtı | Event Tickets < 5.2.2 - Open Redirecttri · event tickets · CWE-601 | Orta6,1 | — | %1,9 | 24 Oca 2022 |
24İzleyin | CVE-2020-36626İstismar yok | Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injectiontri · panel builder · CWE-707 | Orta6,1 | — | %0,6 | 27 Ara 2022 |
21İzleyin | CVE-2022-4759İstismar yok | GigPress < 2.3.28 - Contributor+ Stored XSS via Shortcodetri · gigpress · CWE-79 | Orta5,4 | — | %0,7 | 13 Şub 2023 |
19İzleyin | CVE-2015-9354İstismar yok | The gigpress plugin before 2.3.11 for WordPress has XSS.tri · gigpress · CWE-79 | Orta4,8 | — | %0,7 | 28 Ağu 2019 |
19İzleyin | CVE-2023-7233İstismar yok | GigPress <= 2.3.29 - Admin+ Stored Cross Site Scriptingtri · gigpress · CWE-79 | Orta4,8 | — | %0,5 | 12 Şub 2024 |
- CVE-2023-038135İzleyin
GigPress <= 2.3.28 - Subscriber+ SQLi
YüksekCVSS 8,8İstismar yokEPSS %1tri · gigpress27 Şub 2023
- CVE-2015-935328İzleyin
The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.
YüksekCVSS 7,2İstismar yokEPSS %1tri · gigpress28 Ağu 2019
- CVE-2015-406627İzleyin
Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated us
OrtaCVSS 6,5Kavram kanıtıEPSS %4tri · gigpress27 May 2015
- CVE-2024-129526İzleyin
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
OrtaCVSS 6,5İstismar yokEPSS %0tri · the events calendar14 Haz 2024
- CVE-2021-2502825İzleyin
Event Tickets < 5.2.2 - Open Redirect
OrtaCVSS 6,1Kavram kanıtıEPSS %2tri · event tickets24 Oca 2022
- CVE-2020-3662624İzleyin
Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection
OrtaCVSS 6,1İstismar yokEPSS %1tri · panel builder27 Ara 2022
- CVE-2022-475921İzleyin
GigPress < 2.3.28 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1tri · gigpress13 Şub 2023
- CVE-2015-935419İzleyin
The gigpress plugin before 2.3.11 for WordPress has XSS.
OrtaCVSS 4,8İstismar yokEPSS %1tri · gigpress28 Ağu 2019
- CVE-2023-723319İzleyin
GigPress <= 2.3.29 - Admin+ Stored Cross Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0tri · gigpress12 Şub 2024