wpgogo kayıtları
wpgogo üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %27,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-502 Deserialization of Untrusted Data1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-22695İstismar yok | WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)wpgogo · custom field template · CWE-352 | Yüksek8,8 | — | %0,3 | 10 Tem 2023 |
35İzleyin | CVE-2023-50372İstismar yok | WordPress Custom Post Type Page Template Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)wpgogo · custom post type page template · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Ara 2023 |
33İzleyin | CVE-2022-4324İstismar yok | Custom Field Template < 2.5.8 - Admin+ PHP Object Injectionwpgogo · custom field template · CWE-502 | Yüksek7,2 | — | %17,7 | 2 Oca 2023 |
24İzleyin | CVE-2023-38392İstismar yok | WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)wpgogo · custom field template · CWE-79 | Orta6,1 | — | %0,4 | 7 Ağu 2023 |
21İzleyin | CVE-2022-4682İstismar yok | Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcodewpgogo · lightbox-gallery · CWE-79 | Orta5,4 | — | %0,7 | 13 Şub 2023 |
21İzleyin | CVE-2024-44062İstismar yok | WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerabilitywpgogo · custom field template · CWE-79 | Orta5,4 | — | %0,3 | 15 Eyl 2024 |
21İzleyin | CVE-2024-0627İstismar yok | Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Namewpgogo · custom field template · CWE-79 | Orta5,4 | — | %0,3 | 10 Haz 2024 |
21İzleyin | CVE-2023-6745İstismar yok | Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodewpgogo · custom field template · CWE-79 | Orta5,4 | — | %0,3 | 10 Haz 2024 |
19İzleyin | CVE-2024-0653İstismar yok | Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritpingwpgogo · custom field template · CWE-79 | Orta4,8 | — | %0,2 | 10 Haz 2024 |
17İzleyin | CVE-2020-36742İstismar yok | Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypasswpgogo · custom field template · CWE-352 | Orta4,3 | — | %0,4 | 1 Tem 2023 |
17İzleyin | CVE-2023-6748İstismar yok | Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposurewpgogo · custom field template · CWE-862 | Orta4,3 | — | %0,3 | 10 Haz 2024 |
- CVE-2023-2269535İzleyin
WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpgogo · custom field template10 Tem 2023
- CVE-2023-5037235İzleyin
WordPress Custom Post Type Page Template Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0wpgogo · custom post type page template18 Ara 2023
- CVE-2022-432433İzleyin
Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %18wpgogo · custom field template2 Oca 2023
- CVE-2023-3839224İzleyin
WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0wpgogo · custom field template7 Ağu 2023
- CVE-2022-468221İzleyin
Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1wpgogo · lightbox-gallery13 Şub 2023
- CVE-2024-4406221İzleyin
WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wpgogo · custom field template15 Eyl 2024
- CVE-2024-062721İzleyin
Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
OrtaCVSS 5,4İstismar yokEPSS %0wpgogo · custom field template10 Haz 2024
- CVE-2023-674521İzleyin
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
OrtaCVSS 5,4İstismar yokEPSS %0wpgogo · custom field template10 Haz 2024
- CVE-2024-065319İzleyin
Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping
OrtaCVSS 4,8İstismar yokEPSS %0wpgogo · custom field template10 Haz 2024
- CVE-2020-3674217İzleyin
Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0wpgogo · custom field template1 Tem 2023
- CVE-2023-674817İzleyin
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0wpgogo · custom field template10 Haz 2024