wpdirectorykit kayıtları

wpdirectorykit üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %38,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

13 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2025-13390Kavram kanıtı	WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeoverwpdirectorykit · wp directory kit · CWE-303 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%4,6	3 Ara 2025
40Planlayın	CVE-2023-2278İstismar yok	WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionwpdirectorykit · wp directory kit · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%1,7	12 Haz 2023
39İzleyin	CVE-2023-41875İstismar yok	WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerabilitywpdirectorykit · wp directory kit · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,8	13 Ara 2024
36İzleyin	CVE-2024-3217Kavram kanıtı	WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injectionwpdirectorykit · wp directory kit · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,9	5 Nis 2024
24İzleyin	CVE-2023-2835İstismar yok	WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'wpdirectorykit · wp directory kit · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	2 Haz 2023
24İzleyin	CVE-2024-29774İstismar yok	WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilitywpdirectorykit · wp directory kit · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	27 Mar 2024
24İzleyin	CVE-2024-37487İstismar yok	WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilitywpdirectorykit · wp directory kit · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	21 Tem 2024
24İzleyin	CVE-2023-31229İstismar yok	WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirectionwpdirectorykit · wp directory kit · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,3	29 Ara 2023
21İzleyin	CVE-2023-2280İstismar yok	WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_actionwpdirectorykit · wp directory kit · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,6	9 Haz 2023
21İzleyin	CVE-2023-2279İstismar yok	WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_displaywpdirectorykit · wp directory kit · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,3	31 Ağu 2023
18İzleyin	CVE-2023-2277İstismar yok	WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitemwpdirectorykit · wp directory kit · CWE-352 Kimlik doğrulamasız XSS CSRF	Orta4,7	—	%0,3	12 Haz 2023
17İzleyin	CVE-2023-2351İstismar yok	WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_actionwpdirectorykit · wp directory kit · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,6	12 Haz 2023
10İzleyin	CVE-2024-37253İstismar yok	WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerabilitywpdirectorykit · wp directory kit · CWE-74 RCE	Düşük2,7	—	%0,3	9 Tem 2024

CVE-2025-13390
40Planlayın
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wpdirectorykit · wp directory kit3 Ara 2025
CVE-2023-2278
40Planlayın
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Yol geçişi
wpdirectorykit · wp directory kit12 Haz 2023
CVE-2023-41875
39İzleyin
WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wpdirectorykit · wp directory kit13 Ara 2024
CVE-2024-3217
36İzleyin
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
YüksekCVSS 8,8Kavram kanıtıEPSS %2
- SQL enjeksiyonu
wpdirectorykit · wp directory kit5 Nis 2024
CVE-2023-2835
24İzleyin
WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
wpdirectorykit · wp directory kit2 Haz 2023
CVE-2024-29774
24İzleyin
WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
wpdirectorykit · wp directory kit27 Mar 2024
CVE-2024-37487
24İzleyin
WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
wpdirectorykit · wp directory kit21 Tem 2024
CVE-2023-31229
24İzleyin
WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
wpdirectorykit · wp directory kit29 Ara 2023
CVE-2023-2280
21İzleyin
WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wpdirectorykit · wp directory kit9 Haz 2023
CVE-2023-2279
21İzleyin
WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wpdirectorykit · wp directory kit31 Ağu 2023
CVE-2023-2277
18İzleyin
WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
OrtaCVSS 4,7İstismar yokEPSS %0
wpdirectorykit · wp directory kit12 Haz 2023
CVE-2023-2351
17İzleyin
WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action
OrtaCVSS 4,3İstismar yokEPSS %1
- Erişim denetimi (IDOR)
wpdirectorykit · wp directory kit12 Haz 2023
CVE-2024-37253
10İzleyin
WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability
DüşükCVSS 2,7İstismar yokEPSS %0
- RCE
wpdirectorykit · wp directory kit9 Tem 2024