Buddypress Plugin Vulnérabilités

Chronologie

Version

4.6.02
4.6.12
4.6.22
4.6.32
4.6.42

Contre-mesures

Official Fix5
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Exploitabilité

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined5

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network7

Authentification

Not Defined0
High0
Low4
None3

Interaction de l'utilisateur

Not Defined0
Required3
None4

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤62
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤63
≤72
≤81
≤90
≤100

VulDB

≤10
≤20
≤30
≤41
≤52
≤60
≤73
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤81
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k1
<2k4
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k7
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (48): 1, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.21, 1.0.22, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.9, 1.9.1, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.6.12, 4.6.13, 4.6.14, 4.6.15, 11.3, 11.3.1

Type de logiciel: WordPress Plugin

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
29/12/20235.15.1BuddyPress Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-50880
26/12/20237.57.4rtMedia Plugin/BuddyPress Plugin/bbPress Plugin elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-5931
26/12/20236.76.6rtMedia Plugin/BuddyPress Plugin/bbPress Plugin File Import elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-5939
23/04/20235.85.8Paramveer Singh Activity Reactions for Buddypress Plugin cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-45074
10/04/20186.45.8BuddyPress plugin Group Creation elévation de privilèges$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2014-1889
28/02/20144.34.1BuddyPress BuddyPress plugin cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2014-1888
04/09/20127.36.6BuddyPress BuddyPress plugin wp-load.php sql injection$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2109

◂ PrécédentAperçuSuivant ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!