wpexpertplugins kayıtları
wpexpertplugins üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization2
- CWE-269 Improper Privilege Management1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-5425İstismar yok | Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationwpexpertplugins · post meta data manager · CWE-862 | Yüksek8,8 | — | %0,5 | 28 Eki 2023 |
35İzleyin | CVE-2023-5776İstismar yok | Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletionwpexpertplugins · post meta data manager · CWE-352 | Yüksek8,8 | — | %0,3 | 21 Kas 2023 |
30İzleyin | CVE-2023-5426İstismar yok | Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletionwpexpertplugins · post meta data manager · CWE-862 | Yüksek7,5 | — | %0,5 | 28 Eki 2023 |
28İzleyin | CVE-2024-13835İstismar yok | Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalationwpexpertplugins · post meta data manager · CWE-269 | Yüksek7,2 | — | %0,4 | 7 Mar 2025 |
21İzleyin | CVE-2024-6264İstismar yok | Post Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpexpertplugins · post meta data manager · CWE-79 | Orta5,4 | — | %0,3 | 2 Tem 2024 |
- CVE-2023-542535İzleyin
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %1wpexpertplugins · post meta data manager28 Eki 2023
- CVE-2023-577635İzleyin
Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion
YüksekCVSS 8,8İstismar yokEPSS %0wpexpertplugins · post meta data manager21 Kas 2023
- CVE-2023-542630İzleyin
Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion
YüksekCVSS 7,5İstismar yokEPSS %0wpexpertplugins · post meta data manager28 Eki 2023
- CVE-2024-1383528İzleyin
Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalation
YüksekCVSS 7,2İstismar yokEPSS %0wpexpertplugins · post meta data manager7 Mar 2025
- CVE-2024-626421İzleyin
Post Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpexpertplugins · post meta data manager2 Tem 2024