wpextended kayıtları
wpextended üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-11816İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Executionwpextended · ultimate wordpress toolkit · CWE-862 | Yüksek8,8 | — | %0,7 | 8 Oca 2025 |
35İzleyin | CVE-2024-8102İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Updatewpextended · wp extended · CWE-862 | Yüksek8,8 | — | %0,4 | 4 Eyl 2024 |
26İzleyin | CVE-2024-8104İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Downloadwpextended · wp extended · CWE-22 | Orta6,5 | — | %0,9 | 4 Eyl 2024 |
26İzleyin | CVE-2024-8106İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposurewpextended · wp extended · CWE-200 | Orta6,5 | — | %0,4 | 4 Eyl 2024 |
24İzleyin | CVE-2024-37259Kavram kanıtı | WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilitywpextended · wp extended · CWE-79 | Orta6,1 | — | %0,6 | 22 Tem 2024 |
24İzleyin | CVE-2024-9347İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scriptingwpextended · wp extended · CWE-79 | Orta6,1 | — | %0,4 | 17 Eki 2024 |
24İzleyin | CVE-2024-8117İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_optionwpextended · wp extended · CWE-79 | Orta6,1 | — | %0,4 | 4 Eyl 2024 |
24İzleyin | CVE-2024-8119İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via pagewpextended · wp extended · CWE-79 | Orta6,1 | — | %0,4 | 4 Eyl 2024 |
21İzleyin | CVE-2024-13554İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulationwpextended · wp extended · CWE-862 | Orta5,3 | — | %0,3 | 12 Şub 2025 |
21İzleyin | CVE-2024-8123İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Referencewpextended · wp extended · CWE-639 | Orta5,4 | — | %0,3 | 4 Eyl 2024 |
21İzleyin | CVE-2024-11916İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingwpextended · wp extended · CWE-862 | Orta5,4 | — | %0,2 | 8 Oca 2025 |
17İzleyin | CVE-2024-8121İstismar yok | The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Changewpextended · wp extended · CWE-862 | Orta4,3 | — | %0,3 | 4 Eyl 2024 |
- CVE-2024-1181635İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %0wpextended · ultimate wordpress toolkit8 Oca 2025
- CVE-2024-810235İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update
YüksekCVSS 8,8İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-810426İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download
OrtaCVSS 6,5İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-810626İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
OrtaCVSS 6,5İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-3725924İzleyin
WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1Kavram kanıtıEPSS %0wpextended · wp extended22 Tem 2024
- CVE-2024-934724İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0wpextended · wp extended17 Eki 2024
- CVE-2024-811724İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option
OrtaCVSS 6,1İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-811924İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page
OrtaCVSS 6,1İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-1355421İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
OrtaCVSS 5,3İstismar yokEPSS %0wpextended · wp extended12 Şub 2025
- CVE-2024-812321İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference
OrtaCVSS 5,4İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024
- CVE-2024-1191621İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpextended · wp extended8 Oca 2025
- CVE-2024-812117İzleyin
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change
OrtaCVSS 4,3İstismar yokEPSS %0wpextended · wp extended4 Eyl 2024