Woo kayıtları
woo üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-35879İstismar yok | WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injectionwoo · product vendors · CWE-89 | Kritik9,8 | — | %0,6 | 31 Eki 2023 |
32İzleyin | CVE-2023-37870İstismar yok | WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerabilitywoo · woocommerce warranty requests · CWE-862 | Yüksek8,1 | — | %0,4 | 19 Haz 2024 |
28İzleyin | CVE-2023-33331İstismar yok | WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injectionwoo · product vendors · CWE-89 | Yüksek7,2 | — | %0,9 | 18 Ara 2023 |
26İzleyin | CVE-2023-36512İstismar yok | WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerabilitywoo · automatewoo · CWE-862 | Orta6,5 | — | %0,4 | 19 Haz 2024 |
24İzleyin | CVE-2017-20193İstismar yok | Product Vendors <= 2.0.35 - Reflected Cross Site Scriptingwoo · product vendors · CWE-79 | Orta6,1 | — | %0,4 | 16 Eki 2024 |
21İzleyin | CVE-2023-52186İstismar yok | WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerabilitywoo · product vendors · CWE-862 | Orta5,3 | — | %0,3 | 11 Haz 2024 |
- CVE-2023-3587939İzleyin
WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1woo · product vendors31 Eki 2023
- CVE-2023-3787032İzleyin
WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0woo · woocommerce warranty requests19 Haz 2024
- CVE-2023-3333128İzleyin
WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1woo · product vendors18 Ara 2023
- CVE-2023-3651226İzleyin
WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0woo · automatewoo19 Haz 2024
- CVE-2017-2019324İzleyin
Product Vendors <= 2.0.35 - Reflected Cross Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0woo · product vendors16 Eki 2024
- CVE-2023-5218621İzleyin
WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0woo · product vendors11 Haz 2024