Multidots Schwachstellen

Zeitverlauf

Typ

E-Commerce Management Software4
WordPress Plugin2

Produkt

MULTIDOTS WooCommerce Banner Management Plugin2
MULTIDOTS WooCommerce Quick Reports Plugin2
MULTIDOTS Woo Checkout for Digital Goods Plugin2

Massnahmen

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Zugriffsart

Not Defined0
Physical0
Local0
Adjacent0
Network6

Authentisierung

Not Defined0
High0
Low0
None6

Benutzeraktivität

Not Defined0
Required4
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤60
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k4
<2k0
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k6
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

Affected Products (7): Add Social Share Messenger Buttons Whatsapp (1), Advance Search for WooCommerce Plugin (1), Mass Pages-Posts Creator Plugin (1), Viber Plugin (1), Woo Checkout for Digital Goods Plugin (1), WooCommerce Banner Management Plugin (1), WooCommerce Quick Reports Plugin (1)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
01.06.20185.25.2MULTIDOTS Advance Search for WooCommerce Plugin Stored Cross Site ScriptingE-Commerce Management SoftwareNot DefinedNot Defined0.000830.00CVE-2018-11486
01.06.20185.25.2MULTIDOTS WooCommerce Quick Reports Plugin Stored Cross Site ScriptingE-Commerce Management SoftwareNot DefinedNot Defined0.000880.00CVE-2018-11485
31.05.20185.45.4MULTIDOTS Woo Checkout for Digital Goods Plugin woo_checkout_settings_page Cross Site Request ForgeryWordPress PluginNot DefinedNot Defined0.000690.00CVE-2018-11633
31.05.20185.45.4MULTIDOTS Add Social Share Messenger Buttons Whatsapp whatsapp_share_setting_add_update Cross Site Request ForgeryMessaging SoftwareNot DefinedNot Defined0.000690.00CVE-2018-11632
31.05.20186.46.4MULTIDOTS Mass Pages-Posts Creator Plugin Capability Check mass-pages-posts-creator.php Cross Site ScriptingWordPress PluginNot DefinedNot Defined0.000580.03CVE-2018-11580
31.05.20186.36.3MULTIDOTS WooCommerce Banner Management Plugin class-woo-banner-management.php schwache AuthentisierungE-Commerce Management SoftwareNot DefinedNot Defined0.000870.00CVE-2018-11579

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!