İçeriğe atla
Noroxi

wclovers kayıtları

wclovers üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%6,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Tüm kayıtlar

15 kayıt
  • CVE-2021-24849
    42Planlayın

    WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible21 Ara 2021

  • CVE-2022-4939
    40Planlayın

    WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    wclovers · wcfm membership5 Nis 2023

  • CVE-2023-2276
    39İzleyin

    WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Ch

    KritikCVSS 9,8İstismar yokEPSS %1

    wclovers · wcfm membership20 May 2023

  • CVE-2021-24835
    35İzleyin

    WCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible8 Kas 2021

  • CVE-2022-4935
    35İzleyin

    WCFM Marketplace <= 3.4.11 - Missing Authorization

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · wcfm marketplace5 Nis 2023

  • CVE-2022-4937
    35İzleyin

    The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and includin

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible5 Nis 2023

  • CVE-2024-8290
    35İzleyin

    WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Pr

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible25 Eyl 2024

  • CVE-2022-4941
    35İzleyin

    WCFM Membership <= 2.9.10 - Cross-Site Request Forgery

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · wcfm membership5 Nis 2023

  • CVE-2022-4938
    35İzleyin

    WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible5 Nis 2023

  • CVE-2022-4936
    35İzleyin

    WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery

    YüksekCVSS 8,8İstismar yokEPSS %0

    wclovers · wcfm marketplace5 Nis 2023

  • CVE-2022-4940
    26İzleyin

    WCFM Membership <= 2.10.0 - Missing Authorization

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    wclovers · wcfm membership5 Nis 2023

  • CVE-2025-3780
    26İzleyin

    WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Setting

    OrtaCVSS 6,5İstismar yokEPSS %0

    wclovers · frontend manager for woocommerce along with bookings subscription listings compatible8 Tem 2025

  • CVE-2024-44009
    24İzleyin

    WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    wclovers · wcfm marketplace17 Eyl 2024

  • CVE-2023-2275
    21İzleyin

    WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note

    OrtaCVSS 5,4İstismar yokEPSS %0

    wclovers · woocommerce multivendor marketplace9 Haz 2023

  • CVE-2023-4960
    21İzleyin

    WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    wclovers · wcfm marketplace11 Oca 2024