vivwebsolutions kayıtları
vivwebsolutions üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2015-10100İstismar yok | Dynamic Widgets Plugin dynwid_class.php sql injectionvivwebsolutions · dynamic widgets · CWE-89 | Kritik9,8 | — | %1,0 | 10 Nis 2023 |
35İzleyin | CVE-2024-51669İstismar yok | WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityvivwebsolutions · dynamic widgets · CWE-352 | Yüksek8,8 | — | %0,1 | 19 Kas 2024 |
26İzleyin | CVE-2015-9437İstismar yok | The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limitvivwebsolutions · dynamic widgets · CWE-352 | Orta6,5 | — | %0,8 | 25 Eyl 2019 |
21İzleyin | CVE-2015-9436İstismar yok | The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parametevivwebsolutions · dynamic widgets · CWE-79 | Orta5,4 | — | %1,0 | 25 Eyl 2019 |
- CVE-2015-1010039İzleyin
Dynamic Widgets Plugin dynwid_class.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1vivwebsolutions · dynamic widgets10 Nis 2023
- CVE-2024-5166935İzleyin
WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0vivwebsolutions · dynamic widgets19 Kas 2024
- CVE-2015-943726İzleyin
The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit
OrtaCVSS 6,5İstismar yokEPSS %0vivwebsolutions · dynamic widgets25 Eyl 2019
- CVE-2015-943621İzleyin
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id paramete
OrtaCVSS 5,4İstismar yokEPSS %1vivwebsolutions · dynamic widgets25 Eyl 2019