wppa kayıtları
wppa üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %28,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2023-49812İstismar yok | WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)wppa · wp photo album plus · CWE-639 | Yüksek7,5 | — | %0,5 | 19 Ara 2023 |
29İzleyin | CVE-2024-10958Kavram kanıtı | WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelaywppa · wp photo album plus · CWE-94 | Yüksek7,3 | — | %1,6 | 10 Kas 2024 |
29İzleyin | CVE-2024-4037İstismar yok | WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Executionwppa · wp photo album plus · CWE-94 | Yüksek7,3 | — | %0,5 | 24 May 2024 |
25İzleyin | CVE-2021-25115İstismar yok | WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)wppa · wp photo album plus · CWE-79 | Orta6,4 | — | %0,7 | 14 Şub 2022 |
24İzleyin | CVE-2023-49813İstismar yok | WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)wppa · wp photo album plus · CWE-79 | Orta6,1 | — | %0,4 | 14 Ara 2023 |
24İzleyin | CVE-2024-37416İstismar yok | WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerabilitywppa · wp photo album plus · CWE-79 | Orta6,1 | — | %0,3 | 22 Tem 2024 |
21İzleyin | CVE-2023-49774İstismar yok | WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerabilityj.n. breetvelt a.k.a. opajaap · wp photo album plus · CWE-200 | Orta5,3 | — | %0,3 | 4 Haz 2024 |
- CVE-2023-4981230İzleyin
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)
YüksekCVSS 7,5İstismar yokEPSS %1wppa · wp photo album plus19 Ara 2023
- CVE-2024-1095829İzleyin
WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
YüksekCVSS 7,3Kavram kanıtıEPSS %2wppa · wp photo album plus10 Kas 2024
- CVE-2024-403729İzleyin
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
YüksekCVSS 7,3İstismar yokEPSS %0wppa · wp photo album plus24 May 2024
- CVE-2021-2511525İzleyin
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
OrtaCVSS 6,4İstismar yokEPSS %1wppa · wp photo album plus14 Şub 2022
- CVE-2023-4981324İzleyin
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0wppa · wp photo album plus14 Ara 2023
- CVE-2024-3741624İzleyin
WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wppa · wp photo album plus22 Tem 2024
- CVE-2023-4977421İzleyin
WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0j.n. breetvelt a.k.a. opajaap · wp photo album plus4 Haz 2024