wpsupportplus kayıtları

wpsupportplus üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %11,1
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2014-10389İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.wpsupportplus · wp support plus responsive ticket system · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%2,2	22 Ağu 2019
40Planlayın	CVE-2018-1000131İstismar yok	Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the functwpsupportplus · wp support plus responsive ticket system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%2,1	14 Mar 2018
40Planlayın	CVE-2016-10930İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.wpsupportplus · wp support plus responsive ticket system · CWE-20 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%2,0	22 Ağu 2019
40Planlayın	CVE-2014-10387İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.wpsupportplus · wp support plus responsive ticket system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,8	22 Ağu 2019
37İzleyin	CVE-2014-10390İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.wpsupportplus · wp support plus responsive ticket system · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,1	—	%2,5	22 Ağu 2019
24İzleyin	CVE-2019-7299İstismar yok	A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1wpsupportplus · wp support plus responsive ticket system · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,7	21 Mar 2019
24İzleyin	CVE-2014-10391İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.wpsupportplus · wp support plus responsive ticket system · CWE-74 Kimlik doğrulamasız	Orta6,1	—	%0,9	22 Ağu 2019
24İzleyin	CVE-2019-15331İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.wpsupportplus · wp support plus responsive ticket system · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	22 Ağu 2019
21İzleyin	CVE-2014-10388İstismar yok	The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.wpsupportplus · wp support plus responsive ticket system · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,3	—	%1,3	22 Ağu 2019

CVE-2014-10389
40Planlayın
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2018-1000131
40Planlayın
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the funct
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- SQL enjeksiyonu
wpsupportplus · wp support plus responsive ticket system14 Mar 2018
CVE-2016-10930
40Planlayın
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2014-10387
40Planlayın
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- SQL enjeksiyonu
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2014-10390
37İzleyin
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
KritikCVSS 9,1İstismar yokEPSS %3
- Kimlik doğrulamasız
- Yol geçişi
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2019-7299
24İzleyin
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1
OrtaCVSS 6,1İstismar yokEPSS %2
- Kimlik doğrulamasız
- XSS
wpsupportplus · wp support plus responsive ticket system21 Mar 2019
CVE-2014-10391
24İzleyin
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2019-15331
24İzleyin
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019
CVE-2014-10388
21İzleyin
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
wpsupportplus · wp support plus responsive ticket system22 Ağu 2019