Vulnerabilidades en pluginbuilders
11 resultadosAnálisis Vexday
O PluginBuilders apresenta 11 vulnerabilidades catalogadas, nenhuma delas atualmente sob exploração ativa ou com severidade crítica, o que reduz o risco imediato. A fraqueza predominante é Cross-Site Request Forgery (CWE-352), indicando deficiências em proteção contra ataques CSRF. Sem descobertas recentes (últimos 90 dias), o panorama sugere um fornecedor com exposição moderada e estável, mas que demanda revisão das práticas de validação de requisições.
CVE-2023-1865MEDIUMYourChannel <= 1.2.3 - Missing Authorization to Plugin Settings ResetEPSS 0.7%CVE-2023-1868MEDIUMYourChannel <= 1.2.3 - Missing Authorization to Plugin Cache ResetEPSS 0.6%CVE-2023-1869MEDIUMYourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-2757HIGHWaiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-3999MEDIUMWaiting: One-click countdowns <= 0.6.2 - Missing AuthorizationEPSS 0.4%CVE-2022-4954MEDIUMWaiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site ScriptingEPSS 0.3%CVE-2023-1867MEDIUMYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings ChangeEPSS 0.3%CVE-2023-1870MEDIUMYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation UpdateEPSS 0.3%CVE-2023-1866MEDIUMYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel ResetEPSS 0.3%CVE-2023-1871MEDIUMYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation ResetEPSS 0.3%CVE-2023-4000MEDIUMWaiting: One-click countdowns <= 0.6.2 - Cross-Site Request ForgeryEPSS 0.2%