Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Vulnerability List - Page 29

Found 621 results
CVE IDTitleVendorProductSeverityCVSS ScorePublished AtAI Analysis
CVE-2022-24399 SAP Focused Run 跨站脚本漏洞 SAP SESAP Focused Run (Real User Monitoring) 中危 -2022-03-08 13:36:07 Deep Dive
CVE-2022-0442 UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override UnknownUsersWP – User Registration & User Profile 中危 -2022-03-07 08:16:45 Deep Dive
CVE-2022-0420 RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection UnknownRegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin 高危 -2022-03-07 08:16:33 Deep Dive
CVE-2021-25038 Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting UnknownWordPress Multisite User Sync/Unsync 中危 -2022-03-07 08:16:15 Deep Dive
CVE-2021-25034 WP User < 7.0 - Reflected Cross-Site Scripting UnknownWP User – Custom Registration Forms, Login and User Profile 中危 -2022-02-28 09:06:32 Deep Dive
CVE-2022-0653 Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting CozmoslabsProfile Builder – User Profile & User Registration Forms Medium 6.1 2022-02-24 18:27:05 Deep Dive
CVE-2021-24867 Backdoored Plugins & Themes from AccessPress Themes AccessPress ThemesFrontend Post WordPress Plugin – AccessPress Anonymous Post 超危 -2022-02-21 10:45:39 Deep Dive
CVE-2021-25076 WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting UnknownWP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress 高危 -2022-01-24 08:01:24 Deep Dive
CVE-2021-24858 WP Cookie User Info < 1.0.9 - Admin+ SQL Injection UnknownCookie Notification Plugin for WordPress – WP Cookie User Info 高危 -2022-01-24 08:00:50 Deep Dive
CVE-2022-0233 ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 Authenticated Stored Cross-Site Scripting ProfileGrid – User Profiles, Memberships, Groups and CommunitiesProfileGrid – User Profiles, Memberships, Groups and Communities Medium 6.4 2022-01-18 16:52:28 Deep Dive
CVE-2022-0232 User Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting User Registration, Login & Landing Pages – LeadMagic User Registration, Login & Landing Pages – LeadMagic Medium 4.8 2022-01-18 16:52:25 Deep Dive
CVE-2021-24862 RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection UnknownRegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin 高危 -2022-01-10 15:30:30 Deep Dive
CVE-2021-25032 PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise UnknownPublishPress Capabilities – User Role Access, Editor Permissions, Admin Menus 超危 -2022-01-10 00:00:00 Deep Dive
CVE-2021-24984 WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting UnknownWPFront User Role Editor 中危 -2021-12-27 10:33:24 Deep Dive
CVE-2021-24955 ProfilePress < 3.2.3 - Reflected Cross-Site Scripting UnknownUser Registration, Login Form, User Profile & Membership – ProfilePress (Formerly WP User Avatar) 中危 -2021-12-13 10:41:29 Deep Dive
CVE-2021-24954 ProfilePress < 3.2.3 - Reflected Cross-Site Scripting UnknownUser Registration, Login Form, User Profile & Membership – ProfilePress (Formerly WP User Avatar) 中危 -2021-12-13 10:41:28 Deep Dive
CVE-2021-24859 User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access UnknownUser meta shortcodes 中危 -2021-12-13 10:41:11 Deep Dive
CVE-2021-24731 Pie Register < 3.7.1.6 - Unauthenticated SQL Injection UnknownRegistration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes 超危 -2021-11-08 17:35:16 Deep Dive
CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login UnknownRegistration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes 高危 -2021-11-08 17:34:57 Deep Dive
CVE-2021-24675 One User Avatar < 2.3.7 - Avatar Update via CSRF UnknownOne User Avatar | User Profile Picture 中危 -2021-10-18 13:45:55 Deep Dive