Webnus kayıtları
webnus üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %11,1
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %5,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-284 Improper Access Control1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2021-24946Silahlaştırılmış | Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injectionwebnus · modern events calendar lite · CWE-89 | Kritik9,8 | — | %72,8 | 13 Ara 2021 |
54Planlayın | CVE-2021-24145Silahlaştırılmış | Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCEwebnus · modern events calendar lite · CWE-434 | Yüksek7,2 | — | %87,2 | 18 Mar 2021 |
42Planlayın | CVE-2022-0364İstismar yok | Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scriptingwebnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %69,6 | 21 Mar 2022 |
39İzleyin | CVE-2021-24146Kavram kanıtı | Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Exportwebnus · modern events calendar lite · CWE-284 | Yüksek7,5 | — | %31,0 | 18 Mar 2021 |
39İzleyin | CVE-2021-4458İstismar yok | Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injectionwebnus · modern events calendar lite · CWE-89 | Kritik9,8 | — | %0,4 | 12 Tem 2025 |
38İzleyin | CVE-2024-6522İstismar yok | Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgerywebnus · modern events calendar · CWE-918 | Kritik9,6 | — | %0,4 | 7 Ağu 2024 |
35İzleyin | CVE-2021-24149İstismar yok | Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injectionwebnus · modern events calendar lite · CWE-89 | Yüksek8,8 | — | %1,5 | 18 Mar 2021 |
35İzleyin | CVE-2024-5441İstismar yok | Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Uploadwebnus · modern events calendar · CWE-434 | Yüksek8,8 | — | %1,1 | 9 Tem 2024 |
24İzleyin | CVE-2021-24925İstismar yok | Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scriptingwebnus · modern events calendar lite · CWE-79 | Orta6,1 | — | %0,8 | 13 Ara 2021 |
21İzleyin | CVE-2020-9459İstismar yok | Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allowebnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %1,0 | 28 Şub 2020 |
21İzleyin | CVE-2021-24147İstismar yok | Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)webnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %0,7 | 18 Mar 2021 |
21İzleyin | CVE-2021-24716İstismar yok | Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scriptingwebnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %0,7 | 1 Kas 2021 |
21İzleyin | CVE-2021-25046İstismar yok | Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSSwebnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %0,6 | 17 Oca 2022 |
21İzleyin | CVE-2022-30533İstismar yok | Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject webnus · modern events calendar lite · CWE-79 | Orta5,4 | — | %0,6 | 15 Haz 2022 |
19İzleyin | CVE-2021-24687İstismar yok | Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scriptingwebnus · modern events calendar lite · CWE-79 | Orta4,8 | — | %0,6 | 4 Eki 2021 |
19İzleyin | CVE-2022-27848İstismar yok | WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitywebnus · modern events calendar lite · CWE-79 | Orta4,8 | — | %0,6 | 14 Nis 2022 |
19İzleyin | CVE-2023-1400İstismar yok | Modern Events Calendar lite < 6.5.2 - Admin+ Stored XSSwebnus · modern events calendar lite · CWE-79 | Orta4,8 | — | %0,5 | 27 Mar 2023 |
19İzleyin | CVE-2023-4021İstismar yok | Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scriptingwebnus · modern events calendar lite · CWE-79 | Orta4,8 | — | %0,4 | 20 Eki 2023 |
- CVE-2021-2494661Bu hafta
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
KritikCVSS 9,8SilahlaştırılmışEPSS %73webnus · modern events calendar lite13 Ara 2021
- CVE-2021-2414554Planlayın
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
YüksekCVSS 7,2SilahlaştırılmışEPSS %87webnus · modern events calendar lite18 Mar 2021
- CVE-2022-036442Planlayın
Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %70webnus · modern events calendar lite21 Mar 2022
- CVE-2021-2414639İzleyin
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
YüksekCVSS 7,5Kavram kanıtıEPSS %31webnus · modern events calendar lite18 Mar 2021
- CVE-2021-445839İzleyin
Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
KritikCVSS 9,8İstismar yokEPSS %0webnus · modern events calendar lite12 Tem 2025
- CVE-2024-652238İzleyin
Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery
KritikCVSS 9,6İstismar yokEPSS %0webnus · modern events calendar7 Ağu 2024
- CVE-2021-2414935İzleyin
Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %2webnus · modern events calendar lite18 Mar 2021
- CVE-2024-544135İzleyin
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1webnus · modern events calendar9 Tem 2024
- CVE-2021-2492524İzleyin
Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1webnus · modern events calendar lite13 Ara 2021
- CVE-2020-945921İzleyin
Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allo
OrtaCVSS 5,4İstismar yokEPSS %1webnus · modern events calendar lite28 Şub 2020
- CVE-2021-2414721İzleyin
Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %1webnus · modern events calendar lite18 Mar 2021
- CVE-2021-2471621İzleyin
Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1webnus · modern events calendar lite1 Kas 2021
- CVE-2021-2504621İzleyin
Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1webnus · modern events calendar lite17 Oca 2022
- CVE-2022-3053321İzleyin
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject
OrtaCVSS 5,4İstismar yokEPSS %1webnus · modern events calendar lite15 Haz 2022
- CVE-2021-2468719İzleyin
Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %1webnus · modern events calendar lite4 Eki 2021
- CVE-2022-2784819İzleyin
WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %1webnus · modern events calendar lite14 Nis 2022
- CVE-2023-140019İzleyin
Modern Events Calendar lite < 6.5.2 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %1webnus · modern events calendar lite27 Mar 2023
- CVE-2023-402119İzleyin
Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0webnus · modern events calendar lite20 Eki 2023