Weblizar kayıtları
weblizar üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
58Planlayın | CVE-2022-1609Kavram kanıtı | The School Management < 9.9.7 - Unauthenticated RCE via REST apiweblizar · school management · CWE-94 | Kritik9,8 | — | %64,1 | 16 Oca 2024 |
39İzleyin | CVE-2022-47430İstismar yok | WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injectionweblizar · school management - education \& learning management · CWE-89 | Kritik9,8 | — | %0,7 | 6 Kas 2023 |
39İzleyin | CVE-2022-46849İstismar yok | WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injectionweblizar · responsive coming soon \& maintenance mode · CWE-89 | Kritik9,8 | — | %0,7 | 6 Kas 2023 |
35İzleyin | CVE-2019-15781İstismar yok | The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.weblizar · social likebox \& feed · CWE-352 | Yüksek8,8 | — | %0,7 | 29 Ağu 2019 |
35İzleyin | CVE-2021-34628İstismar yok | Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scriptingweblizar · admin custom login · CWE-352 | Yüksek8,8 | — | %0,7 | 2 Ağu 2021 |
35İzleyin | CVE-2018-5656İstismar yok | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-352 | Yüksek8,8 | — | %0,6 | 12 Oca 2018 |
28İzleyin | CVE-2024-33911Kavram kanıtı | WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerabilityweblizar · school management · CWE-89 | Yüksek7,2 | — | %1,1 | 2 May 2024 |
24İzleyin | CVE-2018-5654İstismar yok | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Orta6,1 | — | %1,0 | 12 Oca 2018 |
24İzleyin | CVE-2018-5653İstismar yok | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Orta6,1 | — | %1,0 | 12 Oca 2018 |
24İzleyin | CVE-2018-5655İstismar yok | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Orta6,1 | — | %0,8 | 12 Oca 2018 |
21İzleyin | CVE-2024-38756İstismar yok | WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerabilityweblizar · coming soon · CWE-200 | Orta5,3 | — | %0,4 | 13 Ağu 2024 |
19İzleyin | CVE-2017-20098İstismar yok | Admin Custom Login Plugin Persistent cross site scriptingweblizar · admin custom login · CWE-80 | Orta4,8 | — | %0,5 | 27 Haz 2022 |
- CVE-2022-160958Planlayın
The School Management < 9.9.7 - Unauthenticated RCE via REST api
KritikCVSS 9,8Kavram kanıtıEPSS %64weblizar · school management16 Oca 2024
- CVE-2022-4743039İzleyin
WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1weblizar · school management - education \& learning management6 Kas 2023
- CVE-2022-4684939İzleyin
WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1weblizar · responsive coming soon \& maintenance mode6 Kas 2023
- CVE-2019-1578135İzleyin
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %1weblizar · social likebox \& feed29 Ağu 2019
- CVE-2021-3462835İzleyin
Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
YüksekCVSS 8,8İstismar yokEPSS %1weblizar · admin custom login2 Ağu 2021
- CVE-2018-565635İzleyin
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
YüksekCVSS 8,8İstismar yokEPSS %1weblizar · pinterest-feeds12 Oca 2018
- CVE-2024-3391128İzleyin
WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability
YüksekCVSS 7,2Kavram kanıtıEPSS %1weblizar · school management2 May 2024
- CVE-2018-565424İzleyin
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1weblizar · pinterest-feeds12 Oca 2018
- CVE-2018-565324İzleyin
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1weblizar · pinterest-feeds12 Oca 2018
- CVE-2018-565524İzleyin
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
OrtaCVSS 6,1İstismar yokEPSS %1weblizar · pinterest-feeds12 Oca 2018
- CVE-2024-3875621İzleyin
WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0weblizar · coming soon13 Ağu 2024
- CVE-2017-2009819İzleyin
Admin Custom Login Plugin Persistent cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %1weblizar · admin custom login27 Haz 2022