İçeriğe atla
Noroxi

wpdevart kayıtları

wpdevart üreticisine ait 41 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%31,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

41 kayıt
  • CVE-2021-24442
    53Planlayın

    Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    wpdevart · poll\, survey\, questionnaire and voting system12 Tem 2021

  • CVE-2022-3982
    40Planlayın

    Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    wpdevart · booking calendar12 Ara 2022

  • CVE-2017-14125
    40Planlayın

    SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary S

    KritikCVSS 9,8İstismar yokEPSS %3

    wpdevart · responsive image gallery gallery album25 Eyl 2017

  • CVE-2022-47428
    39İzleyin

    WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    wpdevart · booking calendar6 Kas 2023

  • CVE-2023-24373
    39İzleyin

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wpdevart · booking calendar3 Haz 2024

  • CVE-2021-34636
    35İzleyin

    Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpdevart · countdown and countup\, woocommerce sales timer28 Eyl 2021

  • CVE-2023-24407
    35İzleyin

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpdevart · booking calendar9 Ara 2024

  • CVE-2024-35750
    35İzleyin

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpdevart · gallery8 Haz 2024

  • CVE-2023-24384
    35İzleyin

    WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpdevart · organization chart23 Şub 2023

  • CVE-2023-45629
    35İzleyin

    WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpdevart · gallery - image and video gallery with thumbnails16 Eki 2023

  • CVE-2018-10363
    30İzleyin

    An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress.

    YüksekCVSS 7,5İstismar yokEPSS %1

    wpdevart · booking calendar13 Haz 2018

  • CVE-2023-0900
    29İzleyin

    AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    wpdevart · pricing table builder5 Haz 2023

  • CVE-2024-9504
    28İzleyin

    Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpdevart · booking calendar, appointment booking system26 Kas 2024

  • CVE-2024-10856
    26İzleyin

    Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %0

    wpdevart · booking calendar24 Ara 2024

  • CVE-2022-1946
    25İzleyin

    Gallery < 2.0.0 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    wpdevart · gallery4 Tem 2022

  • CVE-2024-37542
    25İzleyin

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability

    OrtaCVSS 6,3İstismar yokEPSS %0

    wpdevart · gallery6 Tem 2024

  • CVE-2022-0640
    24İzleyin

    AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    wpdevart · pricing table builder21 Mar 2022

  • CVE-2022-47603
    24İzleyin

    WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpdevart · image and video gallery with thumbnails29 Mar 2023

  • CVE-2024-30550
    24İzleyin

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpdevart · gallery31 Mar 2024

  • CVE-2023-46075
    24İzleyin

    WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpdevart · contact form builder26 Eki 2023

  • CVE-2023-45630
    24İzleyin

    WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpdevart · gallery18 Eki 2023

  • CVE-2021-24464
    21İzleyin

    YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    wpdevart · youtube embed\, playlist and popup2 Ağu 2021

  • CVE-2021-24577
    21İzleyin

    Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    wpdevart · coming soon and maintenance mode11 Eki 2021

  • CVE-2023-0177
    21İzleyin

    Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    wpdevart · social like box and page13 Şub 2023

  • CVE-2024-31120
    21İzleyin

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    wpdevart · gallery31 Mar 2024