wprssaggregator kayıtları
wprssaggregator üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
25İzleyin | CVE-2022-0189Kavram kanıtı | WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)wprssaggregator · wp rss aggregator · CWE-79 | Orta6,1 | — | %2,2 | 28 Şub 2022 |
21İzleyin | CVE-2021-24988İstismar yok | WP RSS Aggregator < 4.19.3 - Subscriber+ Stored Cross-Site Scriptingwprssaggregator · wp rss aggregator · CWE-79 | Orta5,4 | — | %0,3 | 27 Ara 2021 |
19İzleyin | CVE-2021-24768İstismar yok | WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scriptingwprssaggregator · wp rss aggregator · CWE-79 | Orta4,8 | — | %0,6 | 29 Kas 2021 |
19İzleyin | CVE-2024-0630İstismar yok | WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Sourcewprssaggregator · wp rss aggregator · CWE-79 | Orta4,8 | — | %0,3 | 5 Şub 2024 |
15İzleyin | CVE-2024-0628İstismar yok | The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.23.5 via thewprssaggregator · wp rss aggregator · CWE-918 | Düşük3,8 | — | %0,3 | 7 Şub 2024 |
- CVE-2022-018925İzleyin
WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %2wprssaggregator · wp rss aggregator28 Şub 2022
- CVE-2021-2498821İzleyin
WP RSS Aggregator < 4.19.3 - Subscriber+ Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wprssaggregator · wp rss aggregator27 Ara 2021
- CVE-2021-2476819İzleyin
WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0wprssaggregator · wp rss aggregator29 Kas 2021
- CVE-2024-063019İzleyin
WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source
OrtaCVSS 4,8İstismar yokEPSS %0wprssaggregator · wp rss aggregator5 Şub 2024
- CVE-2024-062815İzleyin
The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.23.5 via the
DüşükCVSS 3,8İstismar yokEPSS %0wprssaggregator · wp rss aggregator7 Şub 2024