wpmudev kayıtları
wpmudev üreticisine ait 35 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %37,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-862 Missing Authorization5
- CWE-290 Authentication Bypass by Spoofing2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
35 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2017-20206İstismar yok | Appointments <= 2.2.1 - Unauthenticated PHP Object Injectionwpmudev · appointments · CWE-502 | Kritik9,8 | — | %0,7 | 18 Eki 2025 |
39İzleyin | CVE-2022-44581İstismar yok | WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerabilitywpmudev · defender · CWE-922 | Kritik9,8 | — | %0,7 | 17 May 2024 |
39İzleyin | CVE-2024-37444İstismar yok | WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerabilitywpmudev · defender · CWE-862 | Kritik9,8 | — | %0,5 | 1 Kas 2024 |
39İzleyin | CVE-2023-47189İstismar yok | WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerabilitywpmudev · defender · CWE-287 | Kritik9,8 | — | %0,5 | 4 Haz 2024 |
35İzleyin | CVE-2017-18510İstismar yok | The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.wpmudev · custom sidebars · CWE-352 | Yüksek8,8 | — | %0,6 | 14 Ağu 2019 |
35İzleyin | CVE-2017-18511İstismar yok | The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.wpmudev · custom sidebars · CWE-352 | Yüksek8,8 | — | %0,6 | 14 Ağu 2019 |
35İzleyin | CVE-2024-10402İstismar yok | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creationwpmudev · forminator forms · CWE-862 | Yüksek8,8 | — | %0,5 | 26 Eki 2024 |
35İzleyin | CVE-2024-43117İstismar yok | WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerabilitywpmudev · hummingbird · CWE-352 | Yüksek8,8 | — | %0,2 | 26 Ağu 2024 |
34İzleyin | CVE-2024-0368Kavram kanıtı | Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keyswpmudev · hustle · CWE-522 | Yüksek8,6 | — | %0,8 | 13 Mar 2024 |
31İzleyin | CVE-2017-15079İstismar yok | The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.wpmudev · smush image compression and optimization · CWE-22 | Yüksek7,5 | — | %2,5 | 6 Eki 2017 |
30İzleyin | CVE-2023-5949İstismar yok | SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosurewpmudev · smartcrawl · CWE-862 | Yüksek7,5 | — | %0,8 | 18 Ara 2023 |
30İzleyin | CVE-2023-51490İstismar yok | WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposurewpmudev · defender security · CWE-532 | Yüksek7,5 | — | %0,5 | 8 Oca 2024 |
25İzleyin | CVE-2025-5341İstismar yok | Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameterswpmudev · forminator forms · CWE-79 | Orta6,4 | — | %0,3 | 5 Haz 2025 |
24İzleyin | CVE-2022-1009İstismar yok | Smush < 3.9.9 - Admin+ Reflected Cross-Site Scriptingwpmudev · smush image compression and optimization · CWE-79 | Orta6,1 | — | %0,8 | 30 May 2022 |
24İzleyin | CVE-2015-10098İstismar yok | Broken Link Checker Plugin ui_get_action_links cross site scriptingwpmudev · broken link checker · CWE-79 | Orta6,1 | — | %0,6 | 8 Nis 2023 |
24İzleyin | CVE-2025-0470İstismar yok | Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameterwpmudev · forminator forms · CWE-79 | Orta6,1 | — | %0,3 | 31 Oca 2025 |
22İzleyin | CVE-2023-5089Kavram kanıtı | Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)wpmudev · defender security · CWE-209 | Orta5,3 | — | %2,2 | 16 Eki 2023 |
21İzleyin | CVE-2024-3287İstismar yok | SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing Authorizationwpmudev · smartcrawl seo checker, analyzer & optimizer · CWE-862 | Orta5,3 | — | %0,6 | 2 May 2024 |
21İzleyin | CVE-2024-6554İstismar yok | Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosurewpmudev · branda · CWE-200 | Orta5,3 | — | %0,5 | 11 Tem 2024 |
21İzleyin | CVE-2024-25595İstismar yok | WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerabilitywpmudev · defender · CWE-290 | Orta5,3 | — | %0,4 | 17 May 2024 |
21İzleyin | CVE-2024-10580İstismar yok | Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submissionwpmudev · hustle – email marketing, lead generation, optins, popups · CWE-862 | Orta5,3 | — | %0,4 | 27 Kas 2024 |
21İzleyin | CVE-2024-9700İstismar yok | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulationwpmudev · forminator forms · CWE-639 | Orta5,3 | — | %0,4 | 31 Eki 2024 |
21İzleyin | CVE-2024-6556İstismar yok | SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.8 - Unauthenticated Full Path Disclosurewpmudev · smartcrawl seo checker, analyzer & optimizer · CWE-200 | Orta5,3 | — | %0,4 | 10 Tem 2024 |
21İzleyin | CVE-2023-51542İstismar yok | WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerabilitywpmu dev · branda · CWE-290 | Orta5,3 | — | %0,4 | 4 Haz 2024 |
21İzleyin | CVE-2024-5191İstismar yok | Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploadwpmudev · branda · CWE-79 | Orta5,4 | — | %0,3 | 21 Haz 2024 |
- CVE-2017-2020639İzleyin
Appointments <= 2.2.1 - Unauthenticated PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %1wpmudev · appointments18 Eki 2025
- CVE-2022-4458139İzleyin
WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability
KritikCVSS 9,8İstismar yokEPSS %1wpmudev · defender17 May 2024
- CVE-2024-3744439İzleyin
WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %1wpmudev · defender1 Kas 2024
- CVE-2023-4718939İzleyin
WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpmudev · defender4 Haz 2024
- CVE-2017-1851035İzleyin
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
YüksekCVSS 8,8İstismar yokEPSS %1wpmudev · custom sidebars14 Ağu 2019
- CVE-2017-1851135İzleyin
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %1wpmudev · custom sidebars14 Ağu 2019
- CVE-2024-1040235İzleyin
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation
YüksekCVSS 8,8İstismar yokEPSS %1wpmudev · forminator forms26 Eki 2024
- CVE-2024-4311735İzleyin
WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpmudev · hummingbird26 Ağu 2024
- CVE-2024-036834İzleyin
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
YüksekCVSS 8,6Kavram kanıtıEPSS %1wpmudev · hustle13 Mar 2024
- CVE-2017-1507931İzleyin
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
YüksekCVSS 7,5İstismar yokEPSS %3wpmudev · smush image compression and optimization6 Eki 2017
- CVE-2023-594930İzleyin
SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure
YüksekCVSS 7,5İstismar yokEPSS %1wpmudev · smartcrawl18 Ara 2023
- CVE-2023-5149030İzleyin
WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %0wpmudev · defender security8 Oca 2024
- CVE-2025-534125İzleyin
Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters
OrtaCVSS 6,4İstismar yokEPSS %0wpmudev · forminator forms5 Haz 2025
- CVE-2022-100924İzleyin
Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1wpmudev · smush image compression and optimization30 May 2022
- CVE-2015-1009824İzleyin
Broken Link Checker Plugin ui_get_action_links cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1wpmudev · broken link checker8 Nis 2023
- CVE-2025-047024İzleyin
Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter
OrtaCVSS 6,1İstismar yokEPSS %0wpmudev · forminator forms31 Oca 2025
- CVE-2023-508922İzleyin
Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
OrtaCVSS 5,3Kavram kanıtıEPSS %2wpmudev · defender security16 Eki 2023
- CVE-2024-328721İzleyin
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing Authorization
OrtaCVSS 5,3İstismar yokEPSS %1wpmudev · smartcrawl seo checker, analyzer & optimizer2 May 2024
- CVE-2024-655421İzleyin
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · branda11 Tem 2024
- CVE-2024-2559521İzleyin
WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · defender17 May 2024
- CVE-2024-1058021İzleyin
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submission
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · hustle – email marketing, lead generation, optins, popups27 Kas 2024
- CVE-2024-970021İzleyin
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · forminator forms31 Eki 2024
- CVE-2024-655621İzleyin
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.8 - Unauthenticated Full Path Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · smartcrawl seo checker, analyzer & optimizer10 Tem 2024
- CVE-2023-5154221İzleyin
WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpmu dev · branda4 Haz 2024
- CVE-2024-519121İzleyin
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
OrtaCVSS 5,4İstismar yokEPSS %0wpmudev · branda21 Haz 2024