Wordpress 漏洞

时间轴

类型

产品

WordPress Sniplets Plugin3
WordPress WassUp plugin2
WordPress Math Comment Spam Protection Plugin2
WordPress Blix2
WooCommerce & WordPress Tutorials Custom Thank You ...1

修正

Official Fix22
Temporary Fix0
Workaround0
Unavailable15
Not Defined23

易受攻击性

High14
Functional0
Proof-of-Concept19
Unproven0
Not Defined27

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network60

身份验证

Not Defined0
High0
Low5
None55

用户交互

Not Defined0
Required34
None26

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤525
≤69
≤75
≤816
≤92
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤45
≤526
≤68
≤710
≤810
≤90
≤101

VulDB

≤10
≤20
≤30
≤42
≤528
≤67
≤74
≤816
≤92
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤52
≤60
≤72
≤80
≤91
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k5
<2k29
<5k22
<10k3
<25k1
<50k0
<100k0
≥100k0

本日攻击

<1k56
<2k3
<5k0
<10k1
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (55): AdServe (1), Alert Before You Post (1), Blix (2), Bug Library Plugin (1), Custom Thank You Page Customize for WooCommerce by Binary Carpenter Plugin (1), DVS Custom Notification plugin (1), Dean Logan WP-People plugin (1), Download Manager (1), Download Monitor Plugin (1), FCChat Widget (1), Go Pricing Plugin (1), HD Quiz Plugin (1), Hot Files:File Sharing (1), Lanoba Social plugin (1), Math Comment Spam Protection Plugin (2), Page Flip Image Gallery plugin (1), Pay-with-tweet (2), Permalinks Migration Plugin (1), Peter's Math Anti-spam for Wordpress (1), Photo Album Plugin (1), PictPress (1), Plugin Newsletter plugin (1), Post Comment (1), Real Media Library Plugin (1), Slideshow Gallery2 (1), Sniplets Plugin (3), SpamBam plugin (1), St Newsletter Plugin (1), Unamed Theme Se (1), Upload File plugin (1), User Activation Email Plugin (1), WP-ContactForm (1), WP-Footnotes (1), WP-PostViews plugin (1), WP-Print plugin (1), WP Maintenance Mode plugin (1), WP Support Plus Responsive Ticket System (1), WassUp plugin (2), WordPress MU (1), WordPress mu (1), Wordpress-users (1), Wordpress MU (1), Wordpressclassic (1), Wp Cal Plugin (1), Wp Downloads Manager (1), Wp Forum (1), captcha (1), cryptographp (1), filemanager (1), qTranslate plugin (1), underConstruction plugin (1), weblizar-pinterest-feeds Plugin (1), wordspew (1), wp-publications Plugin (1), wpSS (1)

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-04-174.34.2WooCommerce & WordPress Tutorials Custom Thank You Page Customize for WooCommerce by Binary Carpenter Plugin 权限升级E-Commerce Management SoftwareNot DefinedNot Defined0.000430.00CVE-2024-32517
2023-05-236.66.5WordPress Go Pricing Plugin 权限升级Content Management SystemNot DefinedNot Defined0.000700.00CVE-2023-2494
2021-09-105.25.1WordPress Bug Library Plugin Parameter bug-library.php 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000710.00CVE-2021-38355
2021-09-107.87.6WordPress wp-publications Plugin Archive bibtexbrowser.php 目录遍历Content Management SystemNot DefinedOfficial Fix0.005290.03CVE-2021-38360
2021-09-105.25.1WordPress User Activation Email Plugin user-activation-email.php 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000690.00CVE-2021-38325
2021-08-313.53.5WordPress Real Media Library Plugin Folder.php 跨网站脚本Content Management SystemNot DefinedNot Defined0.000540.00CVE-2021-34668
2021-08-233.53.4WordPress HD Quiz Plugin Answer 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000580.00CVE-2021-24571
2019-06-105.35.1WordPress Post Comment Comments 弱身份验证Content Management SystemNot DefinedOfficial Fix0.034700.00CVE-2019-9881
2018-01-136.56.5WordPress weblizar-pinterest-feeds Plugin Plugin 1.1 admin-ajax.php 跨网站请求伪造Content Management SystemNot DefinedNot Defined0.001060.04CVE-2018-5656
2017-01-107.36.6WordPress WP Support Plus Responsive Ticket System wp_set_auth_cookie 权限升级Content Management SystemProof-of-ConceptNot Defined0.000000.02

50 更多条目未显示

Do you know our Splunk app?

Download it now for free!