İçeriğe atla
Noroxi

Tribulant kayıtları

tribulant üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3,8
Pre-auth RCE
0
Düzeltme kaydı olan
%26,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2014-5460
    47Planlayın

    Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated user

    OrtaCVSS 6,5SilahlaştırılmışEPSS %70

    tribulant · tibulant slideshow gallery11 Eyl 2014

  • CVE-2018-18018
    40Planlayın

    SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&metho

    KritikCVSS 9,8İstismar yokEPSS %2

    tribulant · slideshow gallery15 Nis 2019

  • CVE-2018-20987
    40Planlayın

    The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    tribulant · newsletters22 Ağu 2019

  • CVE-2019-14788
    36İzleyin

    wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory t

    YüksekCVSS 8,8İstismar yokEPSS %3

    tribulant · newsletters15 Ağu 2019

  • CVE-2020-35932
    36İzleyin

    Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (

    YüksekCVSS 8,8İstismar yokEPSS %2

    tribulant · newsletter31 Ara 2020

  • CVE-2019-15828
    35İzleyin

    The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribulant · one click ssl30 Ağu 2019

  • CVE-2024-8247
    35İzleyin

    Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribulant · newsletters6 Eyl 2024

  • CVE-2023-30478
    35İzleyin

    WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribulant · newsletters10 Kas 2023

  • CVE-2023-28497
    35İzleyin

    WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribulant · slideshow gallery12 Kas 2023

  • CVE-2024-37227
    35İzleyin

    WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    tribulant · newsletters21 Haz 2024

  • CVE-2024-5543
    32İzleyin

    Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection

    YüksekCVSS 8,1İstismar yokEPSS %0

    contrid · slideshow gallery lite11 Haz 2024

  • CVE-2024-32953
    30İzleyin

    WordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Nis 2024

  • CVE-2023-4797
    28İzleyin

    Newsletter Lite < 4.9.3 - Admin+ Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    tribulant · newsletters16 Oca 2024

  • CVE-2025-4857
    28İzleyin

    Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion

    YüksekCVSS 7,2İstismar yokEPSS %0

    tribulant · newsletters31 May 2025

  • CVE-2023-28491
    28İzleyin

    WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    tribulant · slideshow gallery20 Ara 2023

  • CVE-2024-10181
    25İzleyin

    Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode

    OrtaCVSS 6,4İstismar yokEPSS %0

    tribulant · newsletters29 Eki 2024

  • CVE-2018-18019
    24İzleyin

    XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[

    OrtaCVSS 6,1İstismar yokEPSS %1

    tribulant · slideshow gallery15 Nis 2019

  • CVE-2018-18017
    24İzleyin

    XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gal

    OrtaCVSS 6,1İstismar yokEPSS %1

    tribulant · slideshow gallery15 Nis 2019

  • CVE-2018-17946
    24İzleyin

    The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupda

    OrtaCVSS 6,1İstismar yokEPSS %0

    tribulant · slideshow gallery3 Eki 2018

  • CVE-2024-35718
    24İzleyin

    WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    tribulant · newsletters8 Haz 2024

  • CVE-2024-13739
    24İzleyin

    Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    tribulant · newsletters22 Mar 2025

  • CVE-2019-14787
    21İzleyin

    The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor c

    OrtaCVSS 5,4İstismar yokEPSS %1

    tribulant · newsletters9 Ağu 2019

  • CVE-2024-31353
    21İzleyin

    WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    tribulant · slideshow gallery10 Nis 2024

  • CVE-2024-7411
    21İzleyin

    Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %0

    contrid · newsletters15 Ağu 2024

  • CVE-2021-24882
    19İzleyin

    Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    tribulant · slideshow gallery23 Kas 2021