wpdownloadmanager kayıtları
wpdownloadmanager üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-269 Improper Privilege Management1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2024-52435İstismar yok | WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerabilitywpdownloadmanager · premium packages - sell digital products securely · CWE-89 | Yüksek7,2 | — | %0,4 | 18 Kas 2024 |
26İzleyin | CVE-2023-4293İstismar yok | Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalationwpdownloadmanager · premium packages - sell digital products securely · CWE-269 | Orta6,5 | — | %0,9 | 12 Ağu 2023 |
21İzleyin | CVE-2023-22713İstismar yok | WordPress Gutenberg Blocks by WordPress Download Manager Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)wpdownloadmanager · gutenberg blocks for wordpress download manager · CWE-79 | Orta5,4 | — | %0,3 | 3 May 2023 |
21İzleyin | CVE-2024-4001İstismar yok | Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcodewpdownloadmanager · download manager · CWE-79 | Orta5,4 | — | %0,2 | 5 Haz 2024 |
17İzleyin | CVE-2024-7386İstismar yok | Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgerywpdownloadmanager · premium packages - sell digital products securely · CWE-352 | Orta4,3 | — | %0,1 | 24 Eyl 2024 |
- CVE-2024-5243528İzleyin
WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0wpdownloadmanager · premium packages - sell digital products securely18 Kas 2024
- CVE-2023-429326İzleyin
Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation
OrtaCVSS 6,5İstismar yokEPSS %0wpdownloadmanager · premium packages - sell digital products securely12 Ağu 2023
- CVE-2023-2271321İzleyin
WordPress Gutenberg Blocks by WordPress Download Manager Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0wpdownloadmanager · gutenberg blocks for wordpress download manager3 May 2023
- CVE-2024-400121İzleyin
Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0wpdownloadmanager · download manager5 Haz 2024
- CVE-2024-738617İzleyin
Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
OrtaCVSS 4,3İstismar yokEPSS %0wpdownloadmanager · premium packages - sell digital products securely24 Eyl 2024