İçeriğe atla
Noroxi

Web-Dorado kayıtları

web-dorado üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3,7
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 21
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2015-2562
    42Planlayın

    Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %38

    web-dorado · ecommerce wd20 Mar 2015

  • CVE-2015-2798
    40Planlayın

    SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    web-dorado · contact form maker25 Tem 2017

  • CVE-2018-5991
    40Planlayın

    SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different v

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    web-dorado · form maker17 Şub 2018

  • CVE-2018-5981
    40Planlayın

    SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    web-dorado · gallery wd17 Şub 2018

  • CVE-2017-7719
    40Planlayın

    SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by p

    KritikCVSS 9,8İstismar yokEPSS %2

    web-dorado · spider event calendar12 Nis 2017

  • CVE-2019-11591
    35İzleyin

    The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant l

    YüksekCVSS 8,8İstismar yokEPSS %1

    web-dorado · contact form29 Nis 2019

  • CVE-2019-11557
    35İzleyin

    The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with res

    YüksekCVSS 8,8İstismar yokEPSS %1

    web-dorado · wp form builder26 Nis 2019

  • CVE-2023-46619
    35İzleyin

    WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    web-dorado · wdsocialwidgets12 Kas 2023

  • CVE-2015-2196
    33İzleyin

    SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the c

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    web-dorado · spider calendar3 Mar 2015

  • CVE-2018-10504
    32İzleyin

    The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

    YüksekCVSS 7,8Kavram kanıtıEPSS %4

    web-dorado · form maker27 Nis 2018

  • CVE-2021-24625
    28İzleyin

    SpiderCatalog <= 1.7.3 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    web-dorado · spidercatalog8 Kas 2021

  • CVE-2023-2655
    28İzleyin

    Contact Form by WD <= 1.13.23 - Admin+ SQLi

    YüksekCVSS 7,2İstismar yokEPSS %0

    web-dorado · contact form maker16 Oca 2024

  • CVE-2015-4350
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the auth

    OrtaCVSS 6,8İstismar yokEPSS %0

    web-dorado · spider catalog15 Haz 2015

  • CVE-2023-5709
    26İzleyin

    WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode

    OrtaCVSS 6,5İstismar yokEPSS %0

    web-dorado · wd widgettwitter7 Kas 2023

  • CVE-2017-2224
    24İzleyin

    Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HT

    OrtaCVSS 6,1İstismar yokEPSS %1

    web-dorado · event calendar wd7 Tem 2017

  • CVE-2018-10301
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attacke

    OrtaCVSS 6,1İstismar yokEPSS %0

    web-dorado · wd instagram feed23 Nis 2018

  • CVE-2018-10300
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to in

    OrtaCVSS 6,1İstismar yokEPSS %0

    web-dorado · wd instagram feed23 Nis 2018

  • CVE-2023-45632
    24İzleyin

    WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    web-dorado · spidervplayer18 Eki 2023

  • CVE-2023-46090
    24İzleyin

    WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    web-dorado · wdsocialwidgets26 Eki 2023

  • CVE-2015-4352
    23İzleyin

    Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentic

    OrtaCVSS 5,8İstismar yokEPSS %0

    web-dorado · web-dorado spider video player15 Haz 2015

  • CVE-2018-16164
    21İzleyin

    Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary

    OrtaCVSS 5,4İstismar yokEPSS %1

    web-dorado · event calendar wd9 Oca 2019

  • CVE-2023-5048
    21İzleyin

    WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    web-dorado · wp form builder22 Kas 2023

  • CVE-2015-4351
    19İzleyin

    The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission

    OrtaCVSS 4,9İstismar yokEPSS %1

    web-dorado · web-dorado spider video player15 Haz 2015

  • CVE-2021-24426
    19İzleyin

    Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    web-dorado · backup-wd12 Tem 2021

  • CVE-2023-48320
    19İzleyin

    WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    web-dorado · spidervplayer30 Kas 2023