Themify Portfolio Post Plugin Schwachstellen

Zeitverlauf

Version

1.2.02
1.2.12
1.2.21
1.01
1.11

Massnahmen

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined4

Zugriffsart

Not Defined0
Physical0
Local0
Adjacent0
Network4

Authentisierung

Not Defined0
High0
Low4
None0

Benutzeraktivität

Not Defined0
Required4
None0

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤53
≤60
≤70
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤53
≤60
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤44
≤50
≤60
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤63
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k3
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k4
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

Affected Versions (10): 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.2, 1.2.1, 1.2.2

Softwaretyp: WordPress Plugin

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
20.04.20233.83.7Themify Portfolio Post Plugin Cross Site Scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2022-32970
13.02.20234.44.4Themify Portfolio Post Plugin Shortcode Attribute Cross Site Scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0362
16.01.20234.44.4Themify Portfolio Post Plugin Shortcode Attribute Cross Site Scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-4464
18.03.20214.44.3Themify Portfolio Post Plugin Custom Panel Cross Site Scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-24129

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!