Mycred Plugin Schwachstellen

Zeitverlauf

Version

2.0	3
2.1	3
2.2	3
2.4.0	3
2.4.1	3

Massnahmen

Official Fix	6
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	2

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	8

Zugriffsart

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	7

Authentisierung

Not Defined	0
High	0
Low	7
None	1

Benutzeraktivität

Not Defined	0
Required	6
None	2

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	3
≤6	0
≤7	0
≤8	1
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	3
≤6	0
≤7	0
≤8	1
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	1
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	1
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	3
<2k	5
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	8
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (21): 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1, 2.4.2, 2.4.3, 2.5, 2.6, 2.6.1, 2.6.2, 2.6.3

Softwaretyp: WordPress Plugin

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
24.04.2024	5.0	4.9	myCred Plugin Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2024-32711
20.06.2023	4.3	4.2	myCred Plugin Cross Site Request Forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-35096
26.04.2022	3.5	3.4	myCred Plugin AJAX Action mycred-tools-import-export erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-1092
26.04.2022	3.5	3.4	myCred Plugin AJAX Action mycred-tools-import-export erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-0363
25.04.2022	3.5	3.4	myCred Plugin AJAX Action mycred-tools-select-user Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-0287
24.01.2022	3.5	3.4	myCred Plugin Search Query Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-25015
29.11.2021	4.8	4.7	myCred Plugin Points Log Admin Dashboard Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-20008
29.11.2021	7.5	7.4	myCred Plugin SQL Injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-24755

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!