vanquish kayıtları

vanquish üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %37,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

16 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2021-24171İstismar yok	WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Uploadvanquish · woocommerce upload files · CWE-434 Kimlik doğrulamasız Yol geçişi Dosya yükleme	Kritik9,8	—	%1,9	5 Nis 2021
39İzleyin	CVE-2024-11150İstismar yok	WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletionvanquish · user extra fields · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%1,4	13 Kas 2024
39İzleyin	CVE-2024-10820İstismar yok	WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Uploadvanquish · woocommerce upload files · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%1,2	13 Kas 2024
39İzleyin	CVE-2024-10627İstismar yok	WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Uploadvanquish · woocommerce support ticket system · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%0,9	9 Kas 2024
39İzleyin	CVE-2024-10801İstismar yok	WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Uploadvanquish · wordpress user extra fields · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%0,9	9 Kas 2024
36İzleyin	CVE-2024-10625İstismar yok	WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletionvanquish · woocommerce support ticket system · CWE-22 pre-auth RCE Yol geçişi	Kritik9,1	—	%1,0	9 Kas 2024
35İzleyin	CVE-2024-10800İstismar yok	WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationvanquish · user extra fields · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,8	13 Kas 2024
35İzleyin	CVE-2024-13343İstismar yok	WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationvanquish · woocommerce customers manager · CWE-269	Yüksek8,8	—	%0,4	1 Şub 2025
33İzleyin	CVE-2024-0399Kavram kanıtı	WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injectionvanquish · woocommerce customers manager · CWE-89 SQL enjeksiyonu	Yüksek8,1	—	%2,9	15 Nis 2024
32İzleyin	CVE-2024-10626İstismar yok	WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletionvanquish · woocommerce support ticket system · CWE-22 RCE Yol geçişi	Yüksek8,1	—	%0,9	9 Kas 2024
32İzleyin	CVE-2024-3983İstismar yok	WooCommerce Customers Manager < 30.1 - Bulk Action via CSRFvanquish · woocommerce customers manager · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,1	—	%0,3	1 Ağu 2024
26İzleyin	CVE-2024-1756İstismar yok	WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosurevanquish · woocommerce customers manager · CWE-352 CSRF	Orta6,5	—	%0,3	24 Nis 2024
26İzleyin	CVE-2024-2843İstismar yok	WooCommerce Customers Manager < 30.1 - User Deletion via CSRFvanquish · woocommerce customers manager · CWE-352 Kimlik doğrulamasız CSRF	Orta6,5	—	%0,3	1 Ağu 2024
26İzleyin	CVE-2024-1747İstismar yok	WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSSvanquish · woocommerce customers manager · CWE-352 XSS CSRF	Orta6,5	—	%0,2	1 Ağu 2024
23İzleyin	CVE-2024-1743İstismar yok	WooCommerce Customers Manager < 29.8 - Reflected XSSvanquish · woocommerce customers manager · CWE-79 Yerel yetki yükseltme XSS	Orta5,9	—	%0,3	24 Nis 2024
21İzleyin	CVE-2024-13775İstismar yok	WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposurevanquish · woocommerce support ticket system · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,2	1 Şub 2025

CVE-2021-24171
40Planlayın
WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %2
vanquish · woocommerce upload files5 Nis 2021
CVE-2024-11150
39İzleyin
WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
vanquish · user extra fields13 Kas 2024
CVE-2024-10820
39İzleyin
WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Dosya yükleme
vanquish · woocommerce upload files13 Kas 2024
CVE-2024-10627
39İzleyin
WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Dosya yükleme
vanquish · woocommerce support ticket system9 Kas 2024
CVE-2024-10801
39İzleyin
WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Dosya yükleme
vanquish · wordpress user extra fields9 Kas 2024
CVE-2024-10625
36İzleyin
WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion
KritikCVSS 9,1İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
vanquish · woocommerce support ticket system9 Kas 2024
CVE-2024-10800
35İzleyin
WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
vanquish · user extra fields13 Kas 2024
CVE-2024-13343
35İzleyin
WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0
vanquish · woocommerce customers manager1 Şub 2025
CVE-2024-0399
33İzleyin
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
YüksekCVSS 8,1Kavram kanıtıEPSS %3
- SQL enjeksiyonu
vanquish · woocommerce customers manager15 Nis 2024
CVE-2024-10626
32İzleyin
WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletion
YüksekCVSS 8,1İstismar yokEPSS %1
- RCE
- Yol geçişi
vanquish · woocommerce support ticket system9 Kas 2024
CVE-2024-3983
32İzleyin
WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
vanquish · woocommerce customers manager1 Ağu 2024
CVE-2024-1756
26İzleyin
WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure
OrtaCVSS 6,5İstismar yokEPSS %0
- CSRF
vanquish · woocommerce customers manager24 Nis 2024
CVE-2024-2843
26İzleyin
WooCommerce Customers Manager < 30.1 - User Deletion via CSRF
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
vanquish · woocommerce customers manager1 Ağu 2024
CVE-2024-1747
26İzleyin
WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
- CSRF
vanquish · woocommerce customers manager1 Ağu 2024
CVE-2024-1743
23İzleyin
WooCommerce Customers Manager < 29.8 - Reflected XSS
OrtaCVSS 5,9İstismar yokEPSS %0
- Yerel yetki yükseltme
- XSS
vanquish · woocommerce customers manager24 Nis 2024
CVE-2024-13775
21İzleyin
WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
vanquish · woocommerce support ticket system1 Şub 2025