Automattic Vulnerabilidad

Cronología

Escribe

E-Commerce Management Software	9
WordPress Plugin	9
Not Defined	6

Producto

Automattic WooCommerce Plugin	7
Automattic WooPayments Plugin	3
Automattic Crowdsignal Dashboard Plugin	2
automattic mongoose	2
Automattic Mongoose	2

Contramedidas

Official Fix	11
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	12

Explotabilidad

High	1
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	23

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	22

Autenticación

Not Defined	0
High	1
Low	12
None	11

La interacción del usuario

Not Defined	0
Required	9
None	15

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	0
≤5	5
≤6	10
≤7	3
≤8	4
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	0
≤5	5
≤6	10
≤7	3
≤8	4
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	7
≤5	6
≤6	6
≤7	2
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	5
≤7	1
≤8	1
≤9	3
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	6
≤8	2
≤9	0
≤10	1

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	2
<2k	19
<5k	3
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	19
<2k	4
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (12): Crowdsignal Dashboard Plugin (2), Editing Toolkit Plugin (1), Jetpack (2), Jetpack Plugin (1), Mongoose (2), Sensei LMS Plugin (1), WP Job Manager Plugin (1), WooCommerce Blocks Plugin (1), WooCommerce Plugin (7), WooCommerce plugin (2), WooPayments Plugin (3), mongoose (2)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2024-04-15	4.3	4.1	Automattic WooCommerce Plugin escalada de privilegios	E-Commerce Management Software	Not Defined	Official Fix	0.00043	0.07	CVE-2024-1310
2024-04-12	5.3	5.2	Automattic WP Job Manager Plugin escalada de privilegios	WordPress Plugin	Not Defined	Not Defined	0.00043	0.06	CVE-2023-52211
2024-04-07	4.3	4.2	Automattic WooCommerce Plugin cross site request forgery	E-Commerce Management Software	Not Defined	Not Defined	0.00043	0.00	CVE-2024-22155
2024-03-16	4.8	4.8	Automattic Crowdsignal Dashboard Plugin cross site request forgery	WordPress Plugin	Not Defined	Not Defined	0.00043	0.02	CVE-2023-51489
2024-02-12	5.1	5.1	Automattic Sensei LMS Plugin cross site scripting	WordPress Plugin	Not Defined	Not Defined	0.00045	0.04	CVE-2023-50875
2024-02-10	5.8	5.8	Automattic Crowdsignal Dashboard Plugin cross site scripting	WordPress Plugin	Not Defined	Not Defined	0.00046	0.05	CVE-2023-51488
2024-01-16	4.9	4.8	Automattic WooCommerce Plugin Delete Review escalada de privilegios	E-Commerce Management Software	Not Defined	Official Fix	0.00050	0.04	CVE-2022-0775
2024-01-08	5.8	5.8	Automattic WooCommerce Plugin cross site request forgery	E-Commerce Management Software	Not Defined	Not Defined	0.00058	0.02	CVE-2023-52222
2024-01-01	5.7	5.7	Automattic WooPayments Plugin escalada de privilegios	WordPress Plugin	Not Defined	Not Defined	0.00087	0.02	CVE-2023-51503
2023-12-29	5.1	5.1	Automattic Editing Toolkit Plugin cross site scripting	WordPress Plugin	Not Defined	Not Defined	0.00045	0.02	CVE-2023-50879

14 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!