vanderwijk kayıtları
vanderwijk üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-3564İstismar yok | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcodevanderwijk · content blocks · CWE-98 | Yüksek8,8 | — | %0,6 | 1 Haz 2024 |
21İzleyin | CVE-2024-3565İstismar yok | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcodevanderwijk · content blocks · CWE-79 | Orta5,4 | — | %0,3 | 1 Haz 2024 |
21İzleyin | CVE-2024-6432İstismar yok | Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parametervanderwijk · content blocks · CWE-79 | Orta5,4 | — | %0,3 | 20 Şub 2025 |
21İzleyin | CVE-2024-44051İstismar yok | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerabilityvanderwijk · content blocks · CWE-79 | Orta5,4 | — | %0,3 | 17 Eyl 2024 |
21İzleyin | CVE-2024-34566İstismar yok | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerabilityvanderwijk · content blocks · CWE-79 | Orta5,4 | — | %0,3 | 8 May 2024 |
- CVE-2024-356435İzleyin
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
YüksekCVSS 8,8İstismar yokEPSS %1vanderwijk · content blocks1 Haz 2024
- CVE-2024-356521İzleyin
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0vanderwijk · content blocks1 Haz 2024
- CVE-2024-643221İzleyin
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
OrtaCVSS 5,4İstismar yokEPSS %0vanderwijk · content blocks20 Şub 2025
- CVE-2024-4405121İzleyin
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0vanderwijk · content blocks17 Eyl 2024
- CVE-2024-3456621İzleyin
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0vanderwijk · content blocks8 May 2024