Multidots Luki w zabezpieczeniach

Oś czasu

Rodzaj

WordPress Plugin4
E-Commerce Management Software2

Produkt

MULTIDOTS Woo Checkout for Digital Goods Plugin2
MULTIDOTS Mass Pages-Posts Creator Plugin2
MULTIDOTS Advance Search for WooCommerce Plugin2

Przeciwdziałanie

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network6

Uwierzytelnianie

Not Defined0
High0
Low0
None6

Interakcja z użytkownikiem

Not Defined0
Required4
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤60
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k4
<2k0
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k6
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Products (7): Add Social Share Messenger Buttons Whatsapp (1), Advance Search for WooCommerce Plugin (1), Mass Pages-Posts Creator Plugin (1), Viber Plugin (1), Woo Checkout for Digital Goods Plugin (1), WooCommerce Banner Management Plugin (1), WooCommerce Quick Reports Plugin (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2018-06-015.25.2MULTIDOTS Advance Search for WooCommerce Plugin Stored cross site scriptingE-Commerce Management SoftwareNot DefinedNot Defined0.000830.00CVE-2018-11486
2018-06-015.25.2MULTIDOTS WooCommerce Quick Reports Plugin Stored cross site scriptingE-Commerce Management SoftwareNot DefinedNot Defined0.000880.00CVE-2018-11485
2018-05-315.45.4MULTIDOTS Woo Checkout for Digital Goods Plugin woo_checkout_settings_page cross site request forgeryWordPress PluginNot DefinedNot Defined0.000690.00CVE-2018-11633
2018-05-315.45.4MULTIDOTS Add Social Share Messenger Buttons Whatsapp whatsapp_share_setting_add_update cross site request forgeryMessaging SoftwareNot DefinedNot Defined0.000690.00CVE-2018-11632
2018-05-316.46.4MULTIDOTS Mass Pages-Posts Creator Plugin Capability Check mass-pages-posts-creator.php cross site scriptingWordPress PluginNot DefinedNot Defined0.000580.03CVE-2018-11580
2018-05-316.36.3MULTIDOTS WooCommerce Banner Management Plugin class-woo-banner-management.php weak authenticationE-Commerce Management SoftwareNot DefinedNot Defined0.000870.00CVE-2018-11579

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!