wclovers kayıtları
wclovers üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %6,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization5
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2021-24849Kavram kanıtı | WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injectionwclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-89 | Kritik9,8 | — | %8,3 | 21 Ara 2021 |
40Planlayın | CVE-2022-4939Kavram kanıtı | WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalationwclovers · wcfm membership · CWE-862 | Kritik9,8 | — | %2,0 | 5 Nis 2023 |
39İzleyin | CVE-2023-2276İstismar yok | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Chwclovers · wcfm membership · CWE-639 | Kritik9,8 | — | %1,0 | 20 May 2023 |
35İzleyin | CVE-2021-24835İstismar yok | WCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injectionwclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-89 | Yüksek8,8 | — | %1,3 | 8 Kas 2021 |
35İzleyin | CVE-2022-4935İstismar yok | WCFM Marketplace <= 3.4.11 - Missing Authorizationwclovers · wcfm marketplace · CWE-89 | Yüksek8,8 | — | %0,7 | 5 Nis 2023 |
35İzleyin | CVE-2022-4937İstismar yok | The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and includinwclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-862 | Yüksek8,8 | — | %0,6 | 5 Nis 2023 |
35İzleyin | CVE-2024-8290İstismar yok | WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Prwclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-639 | Yüksek8,8 | — | %0,6 | 25 Eyl 2024 |
35İzleyin | CVE-2022-4941İstismar yok | WCFM Membership <= 2.9.10 - Cross-Site Request Forgerywclovers · wcfm membership · CWE-352 | Yüksek8,8 | — | %0,3 | 5 Nis 2023 |
35İzleyin | CVE-2022-4938İstismar yok | WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgerywclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-352 | Yüksek8,8 | — | %0,2 | 5 Nis 2023 |
35İzleyin | CVE-2022-4936İstismar yok | WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgerywclovers · wcfm marketplace · CWE-352 | Yüksek8,8 | — | %0,2 | 5 Nis 2023 |
26İzleyin | CVE-2022-4940Kavram kanıtı | WCFM Membership <= 2.10.0 - Missing Authorizationwclovers · wcfm membership · CWE-862 | Orta6,5 | — | %1,0 | 5 Nis 2023 |
26İzleyin | CVE-2025-3780İstismar yok | WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settingwclovers · frontend manager for woocommerce along with bookings subscription listings compatible · CWE-862 | Orta6,5 | — | %0,2 | 8 Tem 2025 |
24İzleyin | CVE-2024-44009İstismar yok | WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerabilitywclovers · wcfm marketplace · CWE-79 | Orta6,1 | — | %0,3 | 17 Eyl 2024 |
21İzleyin | CVE-2023-2275İstismar yok | WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Notewclovers · woocommerce multivendor marketplace · CWE-862 | Orta5,4 | — | %0,4 | 9 Haz 2023 |
21İzleyin | CVE-2023-4960İstismar yok | WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewclovers · wcfm marketplace · CWE-79 | Orta5,4 | — | %0,4 | 11 Oca 2024 |
- CVE-2021-2484942Planlayın
WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection
KritikCVSS 9,8Kavram kanıtıEPSS %8wclovers · frontend manager for woocommerce along with bookings subscription listings compatible21 Ara 2021
- CVE-2022-493940Planlayın
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
KritikCVSS 9,8Kavram kanıtıEPSS %2wclovers · wcfm membership5 Nis 2023
- CVE-2023-227639İzleyin
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Ch
KritikCVSS 9,8İstismar yokEPSS %1wclovers · wcfm membership20 May 2023
- CVE-2021-2483535İzleyin
WCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1wclovers · frontend manager for woocommerce along with bookings subscription listings compatible8 Kas 2021
- CVE-2022-493535İzleyin
WCFM Marketplace <= 3.4.11 - Missing Authorization
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · wcfm marketplace5 Nis 2023
- CVE-2022-493735İzleyin
The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and includin
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · frontend manager for woocommerce along with bookings subscription listings compatible5 Nis 2023
- CVE-2024-829035İzleyin
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Pr
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · frontend manager for woocommerce along with bookings subscription listings compatible25 Eyl 2024
- CVE-2022-494135İzleyin
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · wcfm membership5 Nis 2023
- CVE-2022-493835İzleyin
WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · frontend manager for woocommerce along with bookings subscription listings compatible5 Nis 2023
- CVE-2022-493635İzleyin
WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
YüksekCVSS 8,8İstismar yokEPSS %0wclovers · wcfm marketplace5 Nis 2023
- CVE-2022-494026İzleyin
WCFM Membership <= 2.10.0 - Missing Authorization
OrtaCVSS 6,5Kavram kanıtıEPSS %1wclovers · wcfm membership5 Nis 2023
- CVE-2025-378026İzleyin
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Setting
OrtaCVSS 6,5İstismar yokEPSS %0wclovers · frontend manager for woocommerce along with bookings subscription listings compatible8 Tem 2025
- CVE-2024-4400924İzleyin
WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wclovers · wcfm marketplace17 Eyl 2024
- CVE-2023-227521İzleyin
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note
OrtaCVSS 5,4İstismar yokEPSS %0wclovers · woocommerce multivendor marketplace9 Haz 2023
- CVE-2023-496021İzleyin
WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0wclovers · wcfm marketplace11 Oca 2024