İçeriğe atla
Noroxi

w3eden kayıtları

w3eden üreticisine ait 51 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%19,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

51 kayıt
  • CVE-2015-9301
    40Planlayın

    The liveforms plugin before 3.2.0 for WordPress has SQL injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    w3eden · live forms13 Ağu 2019

  • CVE-2014-9260
    38İzleyin

    The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every Word

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    w3eden · download manager7 Ağu 2017

  • CVE-2022-2431
    36İzleyin

    Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion

    YüksekCVSS 8,8İstismar yokEPSS %3

    w3eden · download manager6 Eyl 2022

  • CVE-2022-2436
    36İzleyin

    Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization

    YüksekCVSS 8,8İstismar yokEPSS %1

    w3eden · download manager6 Eyl 2022

  • CVE-2021-25069
    35İzleyin

    WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS

    YüksekCVSS 8,8İstismar yokEPSS %1

    w3eden · download manager21 Şub 2022

  • CVE-2021-34639
    35İzleyin

    WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    w3eden · download manager5 Ağu 2021

  • CVE-2022-34347
    35İzleyin

    WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    w3eden · download manager22 Ağu 2022

  • CVE-2022-36288
    35İzleyin

    WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    w3eden · download manager23 Ağu 2022

  • CVE-2025-1785
    32İzleyin

    Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite

    YüksekCVSS 8,1İstismar yokEPSS %0

    w3eden · download manager13 Mar 2025

  • CVE-2023-6421
    31İzleyin

    Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    w3eden · download manager1 Oca 2024

  • CVE-2024-11740
    30İzleyin

    Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    w3eden · download manager19 Ara 2024

  • CVE-2022-0828
    30İzleyin

    Download Manager < 3.2.39 - Unauthenticated brute force of files master key

    YüksekCVSS 7,5İstismar yokEPSS %1

    w3eden · download manager11 Nis 2022

  • CVE-2021-25087
    30İzleyin

    Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %1

    w3eden · download manager7 Mar 2022

  • CVE-2022-2362
    30İzleyin

    Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction

    YüksekCVSS 7,5İstismar yokEPSS %1

    w3eden · download manager22 Ağu 2022

  • CVE-2023-1809
    30İzleyin

    Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    w3eden · download manager2 May 2023

  • CVE-2024-2098
    30İzleyin

    Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary

    YüksekCVSS 7,5İstismar yokEPSS %0

    w3eden · download manager13 Haz 2024

  • CVE-2024-32131
    30İzleyin

    WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    w3eden · download manager17 May 2024

  • CVE-2019-15889
    27İzleyin

    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search

    OrtaCVSS 6,1Kavram kanıtıEPSS %11

    w3eden · download manager3 Eyl 2019

  • CVE-2021-34638
    26İzleyin

    WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal

    OrtaCVSS 6,5İstismar yokEPSS %1

    w3eden · download manager5 Ağu 2021

  • CVE-2023-1524
    26İzleyin

    Download Manager < 3.2.71 - Broken Access Controls

    OrtaCVSS 6,5İstismar yokEPSS %0

    w3eden · download manager30 May 2023

  • CVE-2024-56217
    25İzleyin

    WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability

    OrtaCVSS 6,3İstismar yokEPSS %0

    w3eden · download manager31 Ara 2024

  • CVE-2017-2217
    24İzleyin

    Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web

    OrtaCVSS 6,1İstismar yokEPSS %1

    w3eden · download manager7 Tem 2017

  • CVE-2017-2216
    24İzleyin

    Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web scr

    OrtaCVSS 6,1İstismar yokEPSS %1

    w3eden · download manager7 Tem 2017

  • CVE-2022-2168
    24İzleyin

    Download Manager < 3.2.44 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    w3eden · download manager17 Tem 2022

  • CVE-2022-1985
    24İzleyin

    Download Manager <= 3.2.42 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    w3eden · download manager13 Haz 2022