Vulnerabilities in wickedplugins

21 results
Vexday analysis

A Wicked Plugins registra 21 vulnerabilidades na base do Vexday, todas sem exploração ativa documentada e nenhuma classificada como crítica. A fraqueza dominante é Cross-Site Request Forgery (CWE-352), indicando falhas de validação de requisições; não há atividade recente de divulgação, sugerindo risco estável e de menor prioridade no curto prazo.

CVE-2023-0719MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_orderEPSS 0.6%CVE-2023-0712MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_move_objectEPSS 0.6%CVE-2023-0718MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folderEPSS 0.6%CVE-2023-0711MEDIUMWicked Folders <= 2.18.16 - Missing Authorization via ajax_save_stateEPSS 0.6%CVE-2023-0716MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folderEPSS 0.6%CVE-2023-0720MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_orderEPSS 0.6%CVE-2023-0684MEDIUMWicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_foldersEPSS 0.6%CVE-2023-0713MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folderEPSS 0.6%CVE-2023-0717MEDIUMWicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folderEPSS 0.6%CVE-2023-0715MEDIUMWicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folderEPSS 0.6%CVE-2023-0727MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folderEPSS 0.3%CVE-2023-0723MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_objectEPSS 0.3%CVE-2023-0730MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_orderEPSS 0.3%CVE-2023-0728MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folderEPSS 0.3%CVE-2023-0685MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_foldersEPSS 0.3%CVE-2023-0722MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_stateEPSS 0.3%CVE-2023-0724MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folderEPSS 0.3%CVE-2023-0725MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folderEPSS 0.3%CVE-2023-0726MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folderEPSS 0.3%CVE-2023-0729MEDIUMWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_orderEPSS 0.3%