Automattic Vulnerabilità

Sequenza temporale

Genere

WordPress Plugin	10
E-Commerce Management Software	9
Not Defined	6

Prodotto

Automattic WooCommerce Plugin	7
Automattic WooPayments Plugin	3
Automattic WP Job Manager Plugin	2
Automattic Crowdsignal Dashboard Plugin	2
automattic mongoose	2

Contromisure

Official Fix	11
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	13

Sfruttabilità

High	1
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	24

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	23

Autenticazione

Not Defined	0
High	1
Low	12
None	12

Interazione dell'utente

Not Defined	0
Required	9
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	0
≤5	5
≤6	11
≤7	3
≤8	4
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	0
≤5	5
≤6	11
≤7	3
≤8	4
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	7
≤5	6
≤6	7
≤7	2
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	5
≤7	1
≤8	1
≤9	3
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	6
≤8	2
≤9	0
≤10	1

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	2
<2k	20
<5k	3
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	18
<2k	6
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (12): Crowdsignal Dashboard Plugin (2), Editing Toolkit Plugin (1), Jetpack (2), Jetpack Plugin (1), Mongoose (2), Sensei LMS Plugin (1), WP Job Manager Plugin (2), WooCommerce Blocks Plugin (1), WooCommerce Plugin (7), WooCommerce plugin (2), WooPayments Plugin (3), mongoose (2)

Data di pubblicazione	Base	Temp	Vulnerabilità	Prod	Sfr	Con	EPSS	CTI	CVE
09/05/2024	5.3	5.2	Automattic WP Job Manager Plugin rivelazione di un 'informazione	WordPress Plugin	Not Defined	Not Defined	0.00043	0.05	CVE-2024-34549
15/04/2024	4.3	4.1	Automattic WooCommerce Plugin escalazione di privilegi	E-Commerce Management Software	Not Defined	Official Fix	0.00043	0.07	CVE-2024-1310
12/04/2024	5.3	5.2	Automattic WP Job Manager Plugin escalazione di privilegi	WordPress Plugin	Not Defined	Not Defined	0.00043	0.03	CVE-2023-52211
07/04/2024	4.3	4.2	Automattic WooCommerce Plugin cross site request forgery	E-Commerce Management Software	Not Defined	Not Defined	0.00043	0.00	CVE-2024-22155
16/03/2024	4.8	4.8	Automattic Crowdsignal Dashboard Plugin cross site request forgery	WordPress Plugin	Not Defined	Not Defined	0.00043	0.02	CVE-2023-51489
12/02/2024	5.1	5.1	Automattic Sensei LMS Plugin cross site scripting	WordPress Plugin	Not Defined	Not Defined	0.00045	0.04	CVE-2023-50875
10/02/2024	5.8	5.8	Automattic Crowdsignal Dashboard Plugin cross site scripting	WordPress Plugin	Not Defined	Not Defined	0.00046	0.05	CVE-2023-51488
16/01/2024	4.9	4.8	Automattic WooCommerce Plugin Delete Review escalazione di privilegi	E-Commerce Management Software	Not Defined	Official Fix	0.00050	0.04	CVE-2022-0775
08/01/2024	5.8	5.8	Automattic WooCommerce Plugin cross site request forgery	E-Commerce Management Software	Not Defined	Not Defined	0.00058	0.02	CVE-2023-52222
01/01/2024	5.7	5.7	Automattic WooPayments Plugin escalazione di privilegi	WordPress Plugin	Not Defined	Not Defined	0.00087	0.02	CVE-2023-51503

15 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 15 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you know our Splunk app?

Download it now for free!