Web-Settler kayıtları
web-settler üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-23796İstismar yok | WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injectionweb-settler · form builder · CWE-1236 | Kritik9,8 | — | %0,6 | 7 Kas 2023 |
35İzleyin | CVE-2023-23795İstismar yok | WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)web-settler · form builder · CWE-352 | Yüksek8,8 | — | %0,3 | 22 Haz 2023 |
26İzleyin | CVE-2023-23671İstismar yok | WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)web-settler · layer slider · CWE-352 | Orta6,5 | — | %0,3 | 11 Tem 2023 |
21İzleyin | CVE-2021-24513İstismar yok | Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scriptingweb-settler · form builder · CWE-79 | Orta5,4 | — | %0,6 | 6 Eyl 2021 |
21İzleyin | CVE-2021-36851İstismar yok | WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerabilityweb-settler · testimonial slider · CWE-79 | Orta5,4 | — | %0,6 | 4 Nis 2022 |
21İzleyin | CVE-2023-5661İstismar yok | Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcodeweb-settler · social feed · CWE-79 | Orta5,4 | — | %0,5 | 7 Kas 2023 |
21İzleyin | CVE-2023-23798İstismar yok | WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)web-settler · layer slider · CWE-79 | Orta5,4 | — | %0,4 | 10 Ağu 2023 |
19İzleyin | CVE-2023-47228İstismar yok | WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)web-settler · layer slider · CWE-79 | Orta4,8 | — | %0,4 | 8 Kas 2023 |
19İzleyin | CVE-2023-47227İstismar yok | WordPress Social Feed | All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)web-settler · social feed \| all social media in one place · CWE-79 | Orta4,8 | — | %0,4 | 8 Kas 2023 |
19İzleyin | CVE-2023-24412İstismar yok | WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)web-settler · image social feed · CWE-79 | Orta4,8 | — | %0,4 | 1 Eyl 2023 |
19İzleyin | CVE-2022-46861İstismar yok | WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)web-settler · custom login page styler · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
- CVE-2023-2379639İzleyin
WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection
KritikCVSS 9,8İstismar yokEPSS %1web-settler · form builder7 Kas 2023
- CVE-2023-2379535İzleyin
WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0web-settler · form builder22 Haz 2023
- CVE-2023-2367126İzleyin
WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 6,5İstismar yokEPSS %0web-settler · layer slider11 Tem 2023
- CVE-2021-2451321İzleyin
Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1web-settler · form builder6 Eyl 2021
- CVE-2021-3685121İzleyin
WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1web-settler · testimonial slider4 Nis 2022
- CVE-2023-566121İzleyin
Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0web-settler · social feed7 Kas 2023
- CVE-2023-2379821İzleyin
WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0web-settler · layer slider10 Ağu 2023
- CVE-2023-4722819İzleyin
WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0web-settler · layer slider8 Kas 2023
- CVE-2023-4722719İzleyin
WordPress Social Feed | All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0web-settler · social feed \| all social media in one place8 Kas 2023
- CVE-2023-2441219İzleyin
WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0web-settler · image social feed1 Eyl 2023
- CVE-2022-4686119İzleyin
WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0web-settler · custom login page styler10 May 2023