User Profile Luki w zabezpieczeniach

Oś czasu

Wersja

2.0.04
2.0.14
2.0.24
2.0.34
2.0.44

Przeciwdziałanie

Official Fix13
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined20

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network18

Uwierzytelnianie

Not Defined0
High0
Low15
None5

Interakcja z użytkownikiem

Not Defined0
Required14
None6

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤46
≤55
≤65
≤74
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤47
≤54
≤65
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤412
≤53
≤64
≤71
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤62
≤71
≤80
≤93
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤76
≤81
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k7
<2k13
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k18
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (99): 1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.18, 2.0.19, 2.0.21, 2.0.22, 2.0.23, 2.0.24, 2.0.25, 2.0.26, 2.0.27, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.11, 2.1.12, 2.1.13, 2.1.14, 2.1.15, 2.1.16, 2.1.17, 2.1.18, 2.1.19, 2.2, 2.3, 2.4, 2.5, 3.1, 3.2, 3.2.1, 3.2.2, 3.6, 3.6.1, 3.10.1, 3.10.2, 3.10.3, 3.10.4, 3.10.5, 3.10.6, 3.10.7, 3.10.8, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.14.1, 4.14.2, 4.14.3, 4.15, 4.15.1, 4.15.2, 4.15.3, 4.15.4, 4.15.5

Typ oprogramowania: WordPress Plugin

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-04-153.53.4WP User Profile Avatar Plugin Shortcode cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-6067
2024-04-104.94.9collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2024-3210
2024-03-194.94.8PickPlugins User Profile Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2024-29097
2024-03-134.94.9collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-1409
2024-02-065.15.1collizo4sky Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin Shortcode cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-1046
2024-02-015.15.1WP Event Manager WP User Profile Avatar Plugin cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-52118
2024-01-224.94.8WP User Profile Avatar Plugin privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-6384
2024-01-166.36.1User Profile Builder Plugin Setting wppb_two_factor_authentication_settings_update privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2024-0324
2023-11-136.26.1Cozmoslabs User Profile Builder Plugin cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-47669
2023-01-103.53.4Custom User Profile Fields Plugin cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-4831

10 więcej wpisów nie jest pokazywanych

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!