User Profile Vulnérabilités

Chronologie

Version

2.0.04
2.0.14
2.0.24
2.0.34
2.0.44

Contre-mesures

Official Fix13
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined20

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent2
Network18

Authentification

Not Defined0
High0
Low15
None5

Interaction de l'utilisateur

Not Defined0
Required14
None6

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤46
≤55
≤65
≤74
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤47
≤54
≤65
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤412
≤53
≤64
≤71
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤62
≤71
≤80
≤93
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤76
≤81
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k7
<2k13
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k18
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (99): 1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.18, 2.0.19, 2.0.21, 2.0.22, 2.0.23, 2.0.24, 2.0.25, 2.0.26, 2.0.27, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.11, 2.1.12, 2.1.13, 2.1.14, 2.1.15, 2.1.16, 2.1.17, 2.1.18, 2.1.19, 2.2, 2.3, 2.4, 2.5, 3.1, 3.2, 3.2.1, 3.2.2, 3.6, 3.6.1, 3.10.1, 3.10.2, 3.10.3, 3.10.4, 3.10.5, 3.10.6, 3.10.7, 3.10.8, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.14.1, 4.14.2, 4.14.3, 4.15, 4.15.1, 4.15.2, 4.15.3, 4.15.4, 4.15.5

Type de logiciel: WordPress Plugin

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
15/04/20243.53.4WP User Profile Avatar Plugin Shortcode cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-6067
10/04/20244.94.9collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2024-3210
19/03/20244.94.8PickPlugins User Profile Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2024-29097
13/03/20244.94.9collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-1409
06/02/20245.15.1collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin Shortcode cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-1046
01/02/20245.15.1WP Event Manager WP User Profile Avatar Plugin cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-52118
22/01/20244.94.8WP User Profile Avatar Plugin elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-6384
16/01/20246.36.1User Profile Builder Plugin Setting wppb_two_factor_authentication_settings_update elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2024-0324
13/11/20236.26.1Cozmoslabs User Profile Builder Plugin cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-47669
10/01/20233.53.4Custom User Profile Fields Plugin cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-4831

10 plus d'entrées ne sont pas affichées

Want to stay up to date on a daily basis?

Enable the mail alert feature now!