wpkube kayıtları
wpkube üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %27,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-4362İstismar yok | The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_wpkube · kiwi social share · CWE-862 | Kritik9,8 | — | %1,4 | 6 Haz 2023 |
30İzleyin | CVE-2024-31249İstismar yok | WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerabilitywpkube · subscribe to comments reloaded · CWE-532 | Yüksek7,5 | — | %0,5 | 10 Nis 2024 |
29İzleyin | CVE-2024-10952İstismar yok | Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajaxwpkube · authors list · CWE-94 | Yüksek7,3 | — | %0,5 | 3 Ara 2024 |
26İzleyin | CVE-2024-4144İstismar yok | Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Executionwpkube · simple basic contact form · CWE-94 | Orta6,5 | — | %0,6 | 14 May 2024 |
24İzleyin | CVE-2023-37981İstismar yok | WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)wpkube · authors list · CWE-79 | Orta6,1 | — | %0,3 | 27 Tem 2023 |
21İzleyin | CVE-2021-24682İstismar yok | Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scriptingwpkube · cool tag cloud · CWE-79 | Orta5,4 | — | %0,6 | 1 Kas 2021 |
21İzleyin | CVE-2021-24745İstismar yok | About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scriptingwpkube · about author box · CWE-79 | Orta5,4 | — | %0,6 | 29 Kas 2021 |
21İzleyin | CVE-2024-3228İstismar yok | Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosurewpkube · kiwi social share · CWE-200 | Orta5,3 | — | %0,4 | 9 Tem 2024 |
21İzleyin | CVE-2022-29414İstismar yok | WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitieswpkube · subscribe to comments reloaded · CWE-352 | Orta5,4 | — | %0,3 | 29 Nis 2022 |
19İzleyin | CVE-2022-4226İstismar yok | Simple Basic Contact Form < 20221201 - Admin+ Stored XSSwpkube · simple basic contact form · CWE-79 | Orta4,8 | — | %0,5 | 26 Ara 2022 |
19İzleyin | CVE-2024-12716İstismar yok | Simple Basic Contact Form < 20250114 - Admin+ Stored XSSwpkube · simple basic contact form · CWE-79 | Orta4,8 | — | %0,3 | 15 May 2025 |
- CVE-2021-436239İzleyin
The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_
KritikCVSS 9,8İstismar yokEPSS %1wpkube · kiwi social share6 Haz 2023
- CVE-2024-3124930İzleyin
WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wpkube · subscribe to comments reloaded10 Nis 2024
- CVE-2024-1095229İzleyin
Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax
YüksekCVSS 7,3İstismar yokEPSS %0wpkube · authors list3 Ara 2024
- CVE-2024-414426İzleyin
Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution
OrtaCVSS 6,5İstismar yokEPSS %0wpkube · simple basic contact form14 May 2024
- CVE-2023-3798124İzleyin
WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0wpkube · authors list27 Tem 2023
- CVE-2021-2468221İzleyin
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpkube · cool tag cloud1 Kas 2021
- CVE-2021-2474521İzleyin
About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpkube · about author box29 Kas 2021
- CVE-2024-322821İzleyin
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0wpkube · kiwi social share9 Tem 2024
- CVE-2022-2941421İzleyin
WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
OrtaCVSS 5,4İstismar yokEPSS %0wpkube · subscribe to comments reloaded29 Nis 2022
- CVE-2022-422619İzleyin
Simple Basic Contact Form < 20221201 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0wpkube · simple basic contact form26 Ara 2022
- CVE-2024-1271619İzleyin
Simple Basic Contact Form < 20250114 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0wpkube · simple basic contact form15 May 2025