İçeriğe atla
Noroxi

wedevs kayıtları

wedevs üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%46,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

52 kayıt
  • CVE-2021-25076
    40Planlayın

    WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    wedevs · wp user frontend24 Oca 2022

  • CVE-2021-24649
    39İzleyin

    WP User Frontend < 3.5.29 - Obscure Registration as Admin

    KritikCVSS 9,8İstismar yokEPSS %1

    wedevs · wp user frontend21 Kas 2022

  • CVE-2023-34383
    39İzleyin

    WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    wedevs · wp project manager3 Kas 2023

  • CVE-2023-40003
    39İzleyin

    WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wedevs · wp project manager13 Ara 2024

  • CVE-2023-3636
    35İzleyin

    WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %1

    wedevs · wp project manager31 Ağu 2023

  • CVE-2024-6666
    35İzleyin

    WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

    YüksekCVSS 8,8İstismar yokEPSS %1

    wedevs · wp erp11 Tem 2024

  • CVE-2020-36745
    35İzleyin

    WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    wedevs · wp project manager1 Tem 2023

  • CVE-2023-28989
    35İzleyin

    WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wedevs · happy addons for elementor10 Tem 2023

  • CVE-2025-32280
    35İzleyin

    WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wedevs · wp project manager4 Nis 2025

  • CVE-2024-12812
    30İzleyin

    WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information

    YüksekCVSS 7,5İstismar yokEPSS %1

    wedevs · wp erp15 May 2025

  • CVE-2024-12015
    30İzleyin

    SQL Injection in WordPress Project Manager Plugin

    YüksekCVSS 7,7İstismar yokEPSS %1

    wedevs · wp project manager2 Ara 2024

  • CVE-2025-47540
    30İzleyin

    WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wedevs · wemail7 May 2025

  • CVE-2023-2744
    29İzleyin

    WP ERP < 1.12.4 - Admin+ SQL Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    wedevs · wp erp27 Haz 2023

  • CVE-2024-10174
    29İzleyin

    WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthent

    YüksekCVSS 7,3İstismar yokEPSS %1

    wedevs · wp project manager13 Kas 2024

  • CVE-2024-0952
    28İzleyin

    WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id

    YüksekCVSS 7,2İstismar yokEPSS %1

    wedevs · wp erp9 Nis 2024

  • CVE-2024-1173
    28İzleyin

    WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    wedevs · wp erp2 May 2024

  • CVE-2023-47682
    28İzleyin

    WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    wedevs · wp user frontend17 May 2024

  • CVE-2024-0913
    28İzleyin

    WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    wedevs · wp erp29 Mar 2024

  • CVE-2024-38693
    28İzleyin

    WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wedevs · wp user frontend29 Ağu 2024

  • CVE-2024-0608
    26İzleyin

    WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %1

    wedevs · wp erp29 Mar 2024

  • CVE-2024-13752
    26İzleyin

    WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

    OrtaCVSS 6,5İstismar yokEPSS %1

    wedevs · wp project manager15 Şub 2025

  • CVE-2024-12195
    26İzleyin

    WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp project manager4 Oca 2025

  • CVE-2024-13500
    26İzleyin

    WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp project manager15 Şub 2025

  • CVE-2024-10548
    26İzleyin

    WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp project manager18 Ara 2024

  • CVE-2023-51676
    26İzleyin

    WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · happy addons for elementor29 Ara 2023