wp-buy kayıtları

wp-buy üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %20
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

20 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
51Planlayın	CVE-2022-4305Kavram kanıtı	Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Adminwp-buy · login as user or customer \(user switching\) · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%38,6	23 Oca 2023
39İzleyin	CVE-2023-51484İstismar yok	WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerabilitywp-buy · login as user or customer (user switching) · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	25 Nis 2024
35İzleyin	CVE-2021-24829İstismar yok	Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injectionwp-buy · visitor traffic real time statistics · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,3	8 Kas 2021
35İzleyin	CVE-2021-24847İstismar yok	SEO Redirection < 8.2 - Subscriber+ SQL Injectionwp-buy · seo redirection-301 redirect manager · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,3	17 Kas 2021
35İzleyin	CVE-2021-24190İstismar yok	WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · conditional marketing mailer · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24193İstismar yok	Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · visitor traffic real time statistics · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24194İstismar yok	Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · login protection - limit failed login attempts · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24195İstismar yok	Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · login as user or customer \(user switching\) · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24188İstismar yok	WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · wp content copy protection \& no right click · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2021-24189İstismar yok	Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy · captchinoo · CWE-285 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%1,3	14 May 2021
35İzleyin	CVE-2019-15832İstismar yok	The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.wp-buy · visitor traffic real time statistics · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,7	30 Ağu 2019
35İzleyin	CVE-2019-15831İstismar yok	The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.wp-buy · visitor traffic real time statistics · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,7	30 Ağu 2019
35İzleyin	CVE-2022-23983İstismar yok	WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerabilitywp-buy · wp content copy protection \& no right click · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,4	21 Şub 2022
35İzleyin	CVE-2024-49306İstismar yok	WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilitywp-buy · wp content copy protection \& no right click · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	20 Eki 2024
24İzleyin	CVE-2024-6690Kavram kanıtı	WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirectwp-buy · wp content copy protection \& no right click · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,5	15 May 2025
21İzleyin	CVE-2022-4534İstismar yok	Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypasswp-buy · limit login attempts (spam protection) · CWE-348 Kimlik doğrulamasız	Orta5,3	—	%0,3	8 Eki 2024
19İzleyin	CVE-2023-7247İstismar yok	Login as User or Customer <= 3.8 - Admin Account Takeoverwp-buy · login as user or customer \(user switching\) · CWE-269	Orta4,9	—	%0,6	11 Mar 2024
19İzleyin	CVE-2023-36678İstismar yok	WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)wp-buy · wp content copy protection \& no right click · CWE-79 XSS	Orta4,8	—	%0,3	5 Ağu 2023
19İzleyin	CVE-2024-6693İstismar yok	WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSSwp-buy · wp content copy protection \& no right click · CWE-79 XSS	Orta4,8	—	%0,3	15 May 2025
18İzleyin	CVE-2024-13627Kavram kanıtı	WP Touch Slider <= 2.2 - Reflected XSSwp-buy · owl carousel slider · CWE-79 XSS	Orta4,7	—	%0,8	17 Şub 2025

CVE-2022-4305
51Planlayın
Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
KritikCVSS 9,8Kavram kanıtıEPSS %38
- Kimlik doğrulamasız
wp-buy · login as user or customer \(user switching\)23 Oca 2023
CVE-2023-51484
39İzleyin
WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wp-buy · login as user or customer (user switching)25 Nis 2024
CVE-2021-24829
35İzleyin
Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
wp-buy · visitor traffic real time statistics8 Kas 2021
CVE-2021-24847
35İzleyin
SEO Redirection < 8.2 - Subscriber+ SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
wp-buy · seo redirection-301 redirect manager17 Kas 2021
CVE-2021-24190
35İzleyin
WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · conditional marketing mailer14 May 2021
CVE-2021-24193
35İzleyin
Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · visitor traffic real time statistics14 May 2021
CVE-2021-24194
35İzleyin
Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · login protection - limit failed login attempts14 May 2021
CVE-2021-24195
35İzleyin
Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · login as user or customer \(user switching\)14 May 2021
CVE-2021-24188
35İzleyin
WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · wp content copy protection \& no right click14 May 2021
CVE-2021-24189
35İzleyin
Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
wp-buy · captchinoo14 May 2021
CVE-2019-15832
35İzleyin
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wp-buy · visitor traffic real time statistics30 Ağu 2019
CVE-2019-15831
35İzleyin
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wp-buy · visitor traffic real time statistics30 Ağu 2019
CVE-2022-23983
35İzleyin
WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wp-buy · wp content copy protection \& no right click21 Şub 2022
CVE-2024-49306
35İzleyin
WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wp-buy · wp content copy protection \& no right click20 Eki 2024
CVE-2024-6690
24İzleyin
WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect
OrtaCVSS 6,1Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
wp-buy · wp content copy protection \& no right click15 May 2025
CVE-2022-4534
21İzleyin
Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
wp-buy · limit login attempts (spam protection)8 Eki 2024
CVE-2023-7247
19İzleyin
Login as User or Customer <= 3.8 - Admin Account Takeover
OrtaCVSS 4,9İstismar yokEPSS %0
wp-buy · login as user or customer \(user switching\)11 Mar 2024
CVE-2023-36678
19İzleyin
WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wp-buy · wp content copy protection \& no right click5 Ağu 2023
CVE-2024-6693
19İzleyin
WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wp-buy · wp content copy protection \& no right click15 May 2025
CVE-2024-13627
18İzleyin
WP Touch Slider <= 2.2 - Reflected XSS
OrtaCVSS 4,7Kavram kanıtıEPSS %0
- XSS
wp-buy · owl carousel slider17 Şub 2025