WPeka kayıtları

wpeka üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %12,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
28İzleyin	CVE-2023-23678İstismar yok	WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injectionwpeka · wp cookie consent · CWE-1236	Yüksek7,2	—	%0,6	7 Kas 2023
24İzleyin	CVE-2024-4869İstismar yok	WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP headerwpeka · wp cookie consent · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	25 Haz 2024
21İzleyin	CVE-2021-25106İstismar yok	WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSSwpeka · wplegalpages · CWE-79 XSS CSRF	Orta5,4	—	%0,6	7 Şub 2022
21İzleyin	CVE-2024-3599İstismar yok	WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletionwpeka · wp cookie consent · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,5	2 May 2024
21İzleyin	CVE-2024-10113İstismar yok	WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcodewpeka · wp adcenter · CWE-79 XSS	Orta5,4	—	%0,3	15 Kas 2024
21İzleyin	CVE-2024-8317İstismar yok	WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attributewpeka · wp adcenter · CWE-79 XSS	Orta5,4	—	%0,3	6 Eyl 2024
19İzleyin	CVE-2023-4968İstismar yok	WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcodewpeka · wplegalpages · CWE-79 XSS	Orta4,8	—	%0,5	20 Eki 2023
17İzleyin	CVE-2024-11724İstismar yok	Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticatewpeka · wp cookie consent · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	12 Ara 2024

CVE-2023-23678
28İzleyin
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection
YüksekCVSS 7,2İstismar yokEPSS %0
wpeka · wp cookie consent7 Kas 2023
CVE-2024-4869
24İzleyin
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
wpeka · wp cookie consent25 Haz 2024
CVE-2021-25106
21İzleyin
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
- CSRF
wpeka · wplegalpages7 Şub 2022
CVE-2024-3599
21İzleyin
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wpeka · wp cookie consent2 May 2024
CVE-2024-10113
21İzleyin
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wpeka · wp adcenter15 Kas 2024
CVE-2024-8317
21İzleyin
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wpeka · wp adcenter6 Eyl 2024
CVE-2023-4968
19İzleyin
WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wpeka · wplegalpages20 Eki 2023
CVE-2024-11724
17İzleyin
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticate
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
wpeka · wp cookie consent12 Ara 2024