warfareplugins kayıtları
warfareplugins üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %16,7
- Silahlaştırılmış
- 1 · %16,7
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %16,7
- Yayından KEV’e ortanca
- 955 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-506 Embedded Malicious Code1
- CWE-862 Missing Authorization1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
76Bu hafta | CVE-2019-9978Silahlaştırılmış | The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameterwarfareplugins · social warfare · CWE-79 | Orta6,1 | KEV | %72,9 | 24 Mar 2019 |
40Planlayın | CVE-2021-4434İstismar yok | Social Warfare <= 3.5.2 - Remote Code Executionwarfareplugins · social warfare · CWE-94 | Kritik9,8 | — | %1,9 | 17 Oca 2024 |
40Planlayın | CVE-2024-6297Kavram kanıtı | Several WordPress.org Plugins <= Various Versions - Injected Backdoorwarfareplugins · social sharing plugin – social warfare · CWE-506 | Kritik10,0 | — | %1,0 | 25 Haz 2024 |
21İzleyin | CVE-2023-0402İstismar yok | Social Warfare <= 4.3.0 - Missing Authorizationwarfareplugins · social warfare · CWE-862 | Orta5,4 | — | %0,8 | 19 Oca 2023 |
21İzleyin | CVE-2023-4842Kavram kanıtı | Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewarfareplugins · social warfare · CWE-79 | Orta5,4 | — | %0,6 | 7 Kas 2023 |
21İzleyin | CVE-2023-0403İstismar yok | Social Warfare <= 4.3.1 - Cross-Site Request Forgerywarfareplugins · social warfare · CWE-352 | Orta5,4 | — | %0,4 | 19 Oca 2023 |
- CVE-2019-997876Bu hafta
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter
OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %73warfareplugins · social warfare24 Mar 2019
- CVE-2021-443440Planlayın
Social Warfare <= 3.5.2 - Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %2warfareplugins · social warfare17 Oca 2024
- CVE-2024-629740Planlayın
Several WordPress.org Plugins <= Various Versions - Injected Backdoor
KritikCVSS 10,0Kavram kanıtıEPSS %1warfareplugins · social sharing plugin – social warfare25 Haz 2024
- CVE-2023-040221İzleyin
Social Warfare <= 4.3.0 - Missing Authorization
OrtaCVSS 5,4İstismar yokEPSS %1warfareplugins · social warfare19 Oca 2023
- CVE-2023-484221İzleyin
Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4Kavram kanıtıEPSS %1warfareplugins · social warfare7 Kas 2023
- CVE-2023-040321İzleyin
Social Warfare <= 4.3.1 - Cross-Site Request Forgery
OrtaCVSS 5,4İstismar yokEPSS %0warfareplugins · social warfare19 Oca 2023