winwar kayıtları

winwar üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %85,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-23724İstismar yok	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)winwar · wp email capture · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	23 May 2023
30İzleyin	CVE-2023-28421İstismar yok	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposurewinwar · wp email capture · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,5	21 Ara 2023
24İzleyin	CVE-2014-4525İstismar yok	Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for Wowinwar · wp ebay product feeds · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,2	27 Ara 2019
21İzleyin	CVE-2023-23728İstismar yok	WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)winwar · wp flipclock · CWE-79 XSS	Orta5,4	—	%0,4	23 Mar 2023
19İzleyin	CVE-2023-23722İstismar yok	WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)winwar · wp ebay product feeds · CWE-79 XSS	Orta4,8	—	%0,4	23 Mar 2023
19İzleyin	CVE-2023-23723İstismar yok	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)winwar · wp email capture · CWE-79 XSS	Orta4,8	—	%0,4	2 May 2023
19İzleyin	CVE-2023-24005İstismar yok	WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)winwar · inline tweet sharer · CWE-79 XSS	Orta4,8	—	%0,4	25 Nis 2023

CVE-2023-23724
35İzleyin
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
winwar · wp email capture23 May 2023
CVE-2023-28421
30İzleyin
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
winwar · wp email capture21 Ara 2023
CVE-2014-4525
24İzleyin
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for Wo
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
winwar · wp ebay product feeds27 Ara 2019
CVE-2023-23728
21İzleyin
WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
winwar · wp flipclock23 Mar 2023
CVE-2023-23722
19İzleyin
WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
winwar · wp ebay product feeds23 Mar 2023
CVE-2023-23723
19İzleyin
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
winwar · wp email capture2 May 2023
CVE-2023-24005
19İzleyin
WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
winwar · inline tweet sharer25 Nis 2023