Zorem kayıtları
zorem üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization5
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-31283İstismar yok | WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerabilityzorem · advanced local pickup for woocommerce · CWE-862 | Kritik9,8 | — | %0,4 | 9 Haz 2024 |
35İzleyin | CVE-2022-41635İstismar yok | WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)zorem · advanced shipment tracking for woocommerce · CWE-352 | Yüksek8,8 | — | %0,3 | 25 May 2023 |
28İzleyin | CVE-2023-2841İstismar yok | Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injectionzorem · advanced local pickup for woocommerce · CWE-89 | Yüksek7,2 | — | %0,6 | 22 Kas 2023 |
26İzleyin | CVE-2021-4347İstismar yok | Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Changezorem · advanced shipment tracking for woocommerce · CWE-862 | Orta6,5 | — | %0,7 | 6 Haz 2023 |
26İzleyin | CVE-2022-38141İstismar yok | WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Controlzorem · sales report email for woocommerce · CWE-862 | Orta6,5 | — | %0,4 | 17 Oca 2024 |
21İzleyin | CVE-2024-32814İstismar yok | WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerabilityzorem · advanced local pickup for woocommerce · CWE-862 | Orta5,3 | — | %0,3 | 9 Haz 2024 |
17İzleyin | CVE-2022-40702İstismar yok | WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Controlzorem · advanced local pickup for woocommerce · CWE-862 | Orta4,3 | — | %0,4 | 17 Oca 2024 |
- CVE-2024-3128339İzleyin
WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0zorem · advanced local pickup for woocommerce9 Haz 2024
- CVE-2022-4163535İzleyin
WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0zorem · advanced shipment tracking for woocommerce25 May 2023
- CVE-2023-284128İzleyin
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1zorem · advanced local pickup for woocommerce22 Kas 2023
- CVE-2021-434726İzleyin
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
OrtaCVSS 6,5İstismar yokEPSS %1zorem · advanced shipment tracking for woocommerce6 Haz 2023
- CVE-2022-3814126İzleyin
WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control
OrtaCVSS 6,5İstismar yokEPSS %0zorem · sales report email for woocommerce17 Oca 2024
- CVE-2024-3281421İzleyin
WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0zorem · advanced local pickup for woocommerce9 Haz 2024
- CVE-2022-4070217İzleyin
WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control
OrtaCVSS 4,3İstismar yokEPSS %0zorem · advanced local pickup for woocommerce17 Oca 2024