vsourz kayıtları
vsourz üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %11,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-863 Incorrect Authorization1
- CWE-922 Insecure Storage of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-13571İstismar yok | A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress.vsourz · advanced cf7 db · CWE-89 | Kritik9,8 | — | %3,9 | 29 Tem 2019 |
35İzleyin | CVE-2023-28167İstismar yok | WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)vsourz · cf7 invisible recaptcha · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Kas 2023 |
32İzleyin | CVE-2021-24905İstismar yok | Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletionvsourz · advanced cf7 db · CWE-863 | Yüksek8,0 | — | %0,7 | 21 Mar 2022 |
28İzleyin | CVE-2023-2493İstismar yok | All In One Redirection < 2.2.0 - Admin+ SQLivsourz · all in one redirection · CWE-89 | Yüksek7,2 | — | %1,0 | 10 Tem 2023 |
24İzleyin | CVE-2018-21012İstismar yok | The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.vsourz · cf7 invisible recaptcha · CWE-79 | Orta6,1 | — | %0,9 | 9 Eyl 2019 |
24İzleyin | CVE-2022-29408İstismar yok | WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerabilityvsourz · advanced cf7 db · CWE-79 | Orta6,1 | — | %0,7 | 25 May 2022 |
24İzleyin | CVE-2022-45285İstismar yok | Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).vsourz · advanced cf7 db · CWE-79 | Orta6,1 | — | %0,4 | 13 Şub 2023 |
24İzleyin | CVE-2024-37245İstismar yok | WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityvsourz · all in one redirection · CWE-79 | Orta6,1 | — | %0,3 | 22 Tem 2024 |
21İzleyin | CVE-2024-3723İstismar yok | Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposurevsourz1td · advanced contact form 7 db · CWE-922 | Orta5,3 | — | %0,4 | 11 Haz 2024 |
- CVE-2019-1357140Planlayın
A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress.
KritikCVSS 9,8İstismar yokEPSS %3vsourz · advanced cf7 db29 Tem 2019
- CVE-2023-2816735İzleyin
WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0vsourz · cf7 invisible recaptcha12 Kas 2023
- CVE-2021-2490532İzleyin
Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion
YüksekCVSS 8,0İstismar yokEPSS %0vsourz · advanced cf7 db21 Mar 2022
- CVE-2023-249328İzleyin
All In One Redirection < 2.2.0 - Admin+ SQLi
YüksekCVSS 7,2İstismar yokEPSS %1vsourz · all in one redirection10 Tem 2023
- CVE-2018-2101224İzleyin
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
OrtaCVSS 6,1İstismar yokEPSS %0vsourz · cf7 invisible recaptcha9 Eyl 2019
- CVE-2022-2940824İzleyin
WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0vsourz · advanced cf7 db25 May 2022
- CVE-2022-4528524İzleyin
Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).
OrtaCVSS 6,1İstismar yokEPSS %0vsourz · advanced cf7 db13 Şub 2023
- CVE-2024-3724524İzleyin
WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0vsourz · all in one redirection22 Tem 2024
- CVE-2024-372321İzleyin
Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %0vsourz1td · advanced contact form 7 db11 Haz 2024