wp-ecommerce kayıtları
wp-ecommerce üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %10
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-502 Deserialization of Untrusted Data1
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
49Planlayın | CVE-2020-35234Silahlaştırılmış | The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020.wp-ecommerce · easy wp smtp · CWE-532 | Yüksek7,5 | — | %64,6 | 13 Ara 2020 |
40Planlayın | CVE-2019-25141Kavram kanıtı | Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Updatewp-ecommerce · easy wp smtp · CWE-862 | Kritik9,8 | — | %4,5 | 6 Haz 2023 |
35İzleyin | CVE-2022-42699İstismar yok | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)wp-ecommerce · easy wp smtp · CWE-94 | Yüksek8,8 | — | %1,5 | 6 Ara 2022 |
32İzleyin | CVE-2022-45829İstismar yok | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletionwp-ecommerce · easy wp smtp · CWE-22 | Yüksek8,1 | — | %0,9 | 6 Ara 2022 |
30İzleyin | CVE-2024-1514İstismar yok | WP eCommerce <= 3.15.1 - Unauthenticated SQL Injectionwp-ecommerce · wp ecommerce · CWE-89 | Yüksek7,5 | — | %0,7 | 28 Şub 2024 |
28İzleyin | CVE-2022-3334İstismar yok | Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injectionwp-ecommerce · easy wp smtp · CWE-502 | Yüksek7,2 | — | %1,2 | 31 Eki 2022 |
26İzleyin | CVE-2022-45833İstismar yok | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversalwp-ecommerce · easy wp smtp · CWE-22 | Orta6,5 | — | %0,8 | 6 Ara 2022 |
24İzleyin | CVE-2017-7723İstismar yok | XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.wp-ecommerce · easy wp smtp · CWE-79 | Orta6,1 | — | %0,8 | 24 Nis 2017 |
21İzleyin | CVE-2024-35676İstismar yok | WordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilitywp-ecommerce · recurring paypal donations · CWE-79 | Orta5,4 | — | %0,3 | 8 Haz 2024 |
10İzleyin | CVE-2024-3073İstismar yok | Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UIwp-ecommerce · easy wp smtp · CWE-257 | Düşük2,7 | — | %0,3 | 13 Haz 2024 |
- CVE-2020-3523449Planlayın
The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020.
YüksekCVSS 7,5SilahlaştırılmışEPSS %65wp-ecommerce · easy wp smtp13 Ara 2020
- CVE-2019-2514140Planlayın
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
KritikCVSS 9,8Kavram kanıtıEPSS %4wp-ecommerce · easy wp smtp6 Haz 2023
- CVE-2022-4269935İzleyin
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
YüksekCVSS 8,8İstismar yokEPSS %1wp-ecommerce · easy wp smtp6 Ara 2022
- CVE-2022-4582932İzleyin
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion
YüksekCVSS 8,1İstismar yokEPSS %1wp-ecommerce · easy wp smtp6 Ara 2022
- CVE-2024-151430İzleyin
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %1wp-ecommerce · wp ecommerce28 Şub 2024
- CVE-2022-333428İzleyin
Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection
YüksekCVSS 7,2İstismar yokEPSS %1wp-ecommerce · easy wp smtp31 Eki 2022
- CVE-2022-4583326İzleyin
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal
OrtaCVSS 6,5İstismar yokEPSS %1wp-ecommerce · easy wp smtp6 Ara 2022
- CVE-2017-772324İzleyin
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
OrtaCVSS 6,1İstismar yokEPSS %1wp-ecommerce · easy wp smtp24 Nis 2017
- CVE-2024-3567621İzleyin
WordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wp-ecommerce · recurring paypal donations8 Haz 2024
- CVE-2024-307310İzleyin
Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI
DüşükCVSS 2,7İstismar yokEPSS %0wp-ecommerce · easy wp smtp13 Haz 2024