VeronaLabs kayıtları
veronalabs üreticisine ait 29 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %27,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')11
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
29 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
63Bu hafta | CVE-2022-25148Kavram kanıtı | WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_idveronalabs · wp statistics · CWE-89 | Kritik9,8 | — | %80,9 | 24 Şub 2022 |
53Planlayın | CVE-2022-25149Kavram kanıtı | WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IPveronalabs · wp statistics · CWE-89 | Yüksek7,5 | — | %77,5 | 24 Şub 2022 |
48Planlayın | CVE-2022-25305İstismar yok | WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IPveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %78,9 | 24 Şub 2022 |
46Planlayın | CVE-2022-0513İstismar yok | WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reasonveronalabs · wp statistics · CWE-89 | Yüksek7,5 | — | %53,5 | 16 Şub 2022 |
46Planlayın | CVE-2022-4230İstismar yok | WP Statistics < 13.2.9 - Authenticated SQLiveronalabs · wp statistics · CWE-89 | Yüksek8,8 | — | %35,7 | 23 Oca 2023 |
40Planlayın | CVE-2022-0651Kavram kanıtı | WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_typeveronalabs · wp statistics · CWE-89 | Yüksek7,5 | — | %32,2 | 24 Şub 2022 |
40Planlayın | CVE-2019-13275İstismar yok | An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress.veronalabs · wp statistics · CWE-89 | Kritik9,8 | — | %2,6 | 4 Tem 2019 |
40Planlayın | CVE-2017-18515İstismar yok | The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.veronalabs · wp statistics · CWE-89 | Kritik9,8 | — | %2,5 | 14 Ağu 2019 |
39İzleyin | CVE-2021-24340Kavram kanıtı | WP Statistics < 13.0.8 - Unauthenticated SQL Injectionveronalabs · wp statistics · CWE-89 | Yüksek7,5 | — | %29,8 | 7 Haz 2021 |
39İzleyin | CVE-2024-43331İstismar yok | WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerabilityveronalabs · wp sms · CWE-862 | Kritik9,8 | — | %0,4 | 22 Ağu 2024 |
35İzleyin | CVE-2023-0955İstismar yok | WP Statistics < 14.0 - Authenticated SQLiveronalabs · wp statistics · CWE-89 | Yüksek8,8 | — | %0,9 | 27 Mar 2023 |
35İzleyin | CVE-2022-38074İstismar yok | WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injectionveronalabs · wp statistics · CWE-89 | Yüksek8,8 | — | %0,7 | 13 Mar 2023 |
35İzleyin | CVE-2024-30454İstismar yok | WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerabilityveronalabs · wp sms · CWE-352 | Yüksek8,8 | — | %0,2 | 29 Mar 2024 |
30İzleyin | CVE-2023-27447İstismar yok | WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposureveronalabs · wp sms · CWE-200 | Yüksek7,5 | — | %0,5 | 28 Ara 2023 |
26İzleyin | CVE-2021-4333İstismar yok | WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivationveronalabs · wp statistics · CWE-352 | Orta6,5 | — | %0,4 | 7 Mar 2023 |
24İzleyin | CVE-2019-10864İstismar yok | The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Refveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %1,4 | 23 Nis 2019 |
24İzleyin | CVE-2022-25307İstismar yok | WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platformveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %1,4 | 24 Şub 2022 |
24İzleyin | CVE-2022-25306İstismar yok | WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browserveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %1,4 | 24 Şub 2022 |
24İzleyin | CVE-2022-27231İstismar yok | Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter.veronalabs · wp statistics · CWE-79 | Orta6,1 | — | %1,0 | 13 Haz 2022 |
24İzleyin | CVE-2022-1005İstismar yok | WP Statistics < 13.2.2 - Reflected Cross-Site Scriptingveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %0,9 | 8 Haz 2022 |
24İzleyin | CVE-2018-1000556İstismar yok | WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can resveronalabs · wp statistics · CWE-79 | Orta6,1 | — | %0,7 | 26 Haz 2018 |
24İzleyin | CVE-2023-32742İstismar yok | WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)veronalabs · wp sms · CWE-79 | Orta6,1 | — | %0,4 | 30 Ağu 2023 |
24İzleyin | CVE-2024-24881İstismar yok | WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)veronalabs · wp sms · CWE-79 | Orta6,1 | — | %0,4 | 8 Şub 2024 |
21İzleyin | CVE-2019-12566İstismar yok | The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php.veronalabs · wp statistics · CWE-79 | Orta5,4 | — | %1,1 | 2 Haz 2019 |
21İzleyin | CVE-2021-24561İstismar yok | WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scriptingveronalabs · wp sms · CWE-79 | Orta5,4 | — | %0,7 | 23 Ağu 2021 |
- CVE-2022-2514863Bu hafta
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
KritikCVSS 9,8Kavram kanıtıEPSS %81veronalabs · wp statistics24 Şub 2022
- CVE-2022-2514953Planlayın
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP
YüksekCVSS 7,5Kavram kanıtıEPSS %77veronalabs · wp statistics24 Şub 2022
- CVE-2022-2530548Planlayın
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP
OrtaCVSS 6,1İstismar yokEPSS %79veronalabs · wp statistics24 Şub 2022
- CVE-2022-051346Planlayın
WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
YüksekCVSS 7,5İstismar yokEPSS %53veronalabs · wp statistics16 Şub 2022
- CVE-2022-423046Planlayın
WP Statistics < 13.2.9 - Authenticated SQLi
YüksekCVSS 8,8İstismar yokEPSS %36veronalabs · wp statistics23 Oca 2023
- CVE-2022-065140Planlayın
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type
YüksekCVSS 7,5Kavram kanıtıEPSS %32veronalabs · wp statistics24 Şub 2022
- CVE-2019-1327540Planlayın
An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress.
KritikCVSS 9,8İstismar yokEPSS %3veronalabs · wp statistics4 Tem 2019
- CVE-2017-1851540Planlayın
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
KritikCVSS 9,8İstismar yokEPSS %3veronalabs · wp statistics14 Ağu 2019
- CVE-2021-2434039İzleyin
WP Statistics < 13.0.8 - Unauthenticated SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %30veronalabs · wp statistics7 Haz 2021
- CVE-2024-4333139İzleyin
WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0veronalabs · wp sms22 Ağu 2024
- CVE-2023-095535İzleyin
WP Statistics < 14.0 - Authenticated SQLi
YüksekCVSS 8,8İstismar yokEPSS %1veronalabs · wp statistics27 Mar 2023
- CVE-2022-3807435İzleyin
WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1veronalabs · wp statistics13 Mar 2023
- CVE-2024-3045435İzleyin
WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0veronalabs · wp sms29 Mar 2024
- CVE-2023-2744730İzleyin
WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1veronalabs · wp sms28 Ara 2023
- CVE-2021-433326İzleyin
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
OrtaCVSS 6,5İstismar yokEPSS %0veronalabs · wp statistics7 Mar 2023
- CVE-2019-1086424İzleyin
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Ref
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics23 Nis 2019
- CVE-2022-2530724İzleyin
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics24 Şub 2022
- CVE-2022-2530624İzleyin
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics24 Şub 2022
- CVE-2022-2723124İzleyin
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter.
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics13 Haz 2022
- CVE-2022-100524İzleyin
WP Statistics < 13.2.2 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics8 Haz 2022
- CVE-2018-100055624İzleyin
WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can res
OrtaCVSS 6,1İstismar yokEPSS %1veronalabs · wp statistics26 Haz 2018
- CVE-2023-3274224İzleyin
WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0veronalabs · wp sms30 Ağu 2023
- CVE-2024-2488124İzleyin
WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0veronalabs · wp sms8 Şub 2024
- CVE-2019-1256621İzleyin
The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php.
OrtaCVSS 5,4İstismar yokEPSS %1veronalabs · wp statistics2 Haz 2019
- CVE-2021-2456121İzleyin
WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1veronalabs · wp sms23 Ağu 2021