Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47412 State: PUBLISHED Published: 2023-02-07T19:16:17.595Z Last Updated: 2025-03-25T14:10:22.955Z Vendors: ONLYOFFICE Products: Workspace Problem Types: CWE-79 Description: Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/ - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#733
CVE ID: CVE-2022-47413 State: PUBLISHED Published: 2023-02-07T21:37:34.095Z Last Updated: 2025-03-25T14:08:53.524Z Vendors: OpenKM Products: OpenKM Problem Types: CWE-79 Description: Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47414 State: PUBLISHED Published: 2023-02-07T21:41:39.203Z Last Updated: 2025-03-25T14:08:10.227Z Vendors: OpenKM Products: OpenKM Problem Types: CWE-79 Description: If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47415 State: PUBLISHED Published: 2023-02-07T21:33:56.745Z Last Updated: 2025-03-25T14:09:43.739Z Vendors: LogicalDOC Products: LogicalDOC Enterprise, LogicalDOC Community Edition Problem Types: CWE-79 Description: LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47416 State: PUBLISHED Published: 2023-02-07T21:46:38.739Z Last Updated: 2025-03-25T14:04:23.568Z Vendors: LogicalDOC Products: LogicalDOC Enterprise Problem Types: CWE-79 Description: LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47417 State: PUBLISHED Published: 2023-02-07T21:59:24.965Z Last Updated: 2025-03-25T14:35:37.236Z Vendors: LogicalDOC Products: LogicalDOC Enterprise, LogicalDOC Community Edition Problem Types: CWE-79 Description: LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47418 State: PUBLISHED Published: 2023-02-07T22:04:06.882Z Last Updated: 2025-03-25T14:33:59.819Z Vendors: LogicalDOC Products: LogicalDOC Enterprise, LogicalDOC Community Edition Problem Types: CWE-79 Description: LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
CVE ID: CVE-2022-47419 State: PUBLISHED Published: 2023-02-07T21:47:48.772Z Last Updated: 2025-03-25T14:03:29.556Z Vendors: Mayan EDMS Products: Mayan EDMS Problem Types: CWE-79 Description: An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/ - https://www.mayan-edms.com/news/2023/02/version-4.3.6/
CVE ID: CVE-2022-47420 State: PUBLISHED Published: 2023-11-06T07:41:14.661Z Last Updated: 2024-09-05T19:57:32.092Z Vendors: Online ADA Products: Accessibility Suite by Online ADA Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/online-accessibility/wordpress-accessibility-suite-by-online-ada-plugin-4-11-sql-injection?_s_id=cve
CVE ID: CVE-2022-47421 State: PUBLISHED Published: 2023-07-18T14:00:18.147Z Last Updated: 2024-09-25T17:01:41.944Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Repute InfoSystems Products: ARMember (free), ARMember (premium) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-4-stored-cross-site-scripting-xss-on-common-messages-settings?_s_id=
y/armember-membership/wordpress-armember-plugin-4-0-4-stored-cross-site-scripting-xss-on-common-messages-settings?_s_id=cve - https://patchstack.com/database/vulnerability/armember/wordpress-armember-premium-wordpress-membership-plugin-plugin-5-8-stored-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47422 State: PUBLISHED Published: 2023-03-14T08:47:07.947Z Last Updated: 2025-01-13T15:52:31.029Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: HM Plugin Products: Accept Stripe Donation – AidWP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-stripe-donation/wordpress-wordpress-stripe-donation-plugin-3-1-5-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47423 State: PUBLISHED Published: 2023-05-10T10:23:08.177Z Last Updated: 2025-02-19T21:30:59.595Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ulf Benjaminsson Products: WP-dTree Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dtree-30/wordpress-wp-dtree-plugin-4-4-5-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47424 State: PUBLISHED Published: 2024-11-19T17:21:22.360Z Last Updated: 2024-11-19T18:31:06.683Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Repute InfoSystems Products: ARMember, ARMember Premium Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-5-cros
nt: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-5-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47426 State: PUBLISHED Published: 2023-11-03T12:47:23.067Z Last Updated: 2024-09-05T18:17:31.922Z Vendors: Neshan Maps Platform Products: Neshan Maps Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Neshan Maps Platform Neshan Maps neshan-maps allows SQL Injection.This issue affects Neshan Maps: from n/a through 1.1.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/neshan-maps/wordpress-neshan-maps-plugin-1-1-4-sql-injection?_s_id=cve
CVE ID: CVE-2022-47427 State: PUBLISHED Published: 2023-03-15T10:35:46.246Z Last Updated: 2025-01-13T15:51:52.912Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Joseph C Dolson Products: My Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/my-calendar/wordpress-my-calendar-plugin-3-3-24-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47428 State: PUBLISHED Published: 2023-11-06T07:36:32.349Z Last Updated: 2024-09-05T19:54:06.844Z Vendors: WpDevArt Products: Booking calendar, Appointment Booking System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plug
ttps://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plugin-3-2-6-sql-injection?_s_id=cve
CVE ID: CVE-2022-47429 State: PUBLISHED Published: 2024-12-13T14:23:15.535Z Last Updated: 2024-12-13T21:19:41.592Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: 8Degree Themes Products: Coming Soon Landing Page and Maintenance Mode WordPress Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin allows Retrieve Embedded Sensitive Data.This issue affects Coming Soon Landing Page and Maintenance Mode WordPress Plugin: from n/a through 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/8
2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/8-degree-coming-soon-page/vulnerability/wordpress-coming-soon-landing-page-and-maintenance-mode-wordpress-plugin-plugin-2-2-0-broken-access-control?_s_id=cve
CVE ID: CVE-2022-47430 State: PUBLISHED Published: 2023-11-06T07:43:50.855Z Last Updated: 2024-09-05T14:15:07.494Z Vendors: Weblizar Products: The School Management – Education & Learning Management Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/school-management-system/wordpress-the-schoo
P Vulnrichment: References: - https://patchstack.com/database/vulnerability/school-management-system/wordpress-the-school-management-plugin-4-1-sql-injection?_s_id=cve
CVE ID: CVE-2022-47431 State: PUBLISHED Published: 2023-03-23T11:50:15.363Z Last Updated: 2025-01-10T19:17:55.791Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tussendoor internet & marketing Products: Open RDW kenteken voertuiginformatie Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformatie plugin <= 2.0.14 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/open-rdw-kenteken-voertuiginformatie/wordpress-open-rdw-kenteken-voertuiginformatie-plugin-2-0-14-cross-s
/vulnerability/open-rdw-kenteken-voertuiginformatie/wordpress-open-rdw-kenteken-voertuiginformatie-plugin-2-0-14-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47432 State: PUBLISHED Published: 2023-11-06T07:46:58.318Z Last Updated: 2024-09-05T14:13:33.614Z Vendors: Kemal YAZICI - PluginPress Products: Shortcode IMDB Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcode-imdb/wordpress-shortcode-imdb-plugin-6-0-8-sql-injection?_s_id=cve
CVE ID: CVE-2022-47433 State: PUBLISHED Published: 2023-03-29T12:23:53.951Z Last Updated: 2025-01-10T19:14:45.546Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Daniel Powney Products: Multi Rating Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-5-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47434 State: PUBLISHED Published: 2023-05-04T20:35:25.804Z Last Updated: 2025-01-09T15:27:08.706Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PB SEO Friendly Images Products: PB SEO Friendly Images Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PB SEO Friendly Images plugin <= 4.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pb-seo-friendly-images/wordpress-pb-seo-friendly-images-plugin-4-0-5-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47435 State: PUBLISHED Published: 2023-04-23T09:18:31.643Z Last Updated: 2025-01-10T18:46:59.135Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Olive Design Products: WP-OliveCart Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Olive Design WP-OliveCart plugin <= 1.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-olivecart/wordpress-wp-olivecart-plugin-1-1-3-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47436 State: PUBLISHED Published: 2023-05-10T10:17:08.174Z Last Updated: 2024-08-03T14:55:07.960Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: MantraBrain Products: Yatra Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yatra/wordpress-best-travel-booking-wordpress-plugin-tour-booking-system-trip-booking-wordpress-plugin-yatra-plugin-2-1-13-cross-site-script
-travel-booking-wordpress-plugin-tour-booking-system-trip-booking-wordpress-plugin-yatra-plugin-2-1-13-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47437 State: PUBLISHED Published: 2023-05-08T14:16:10.533Z Last Updated: 2025-01-09T15:24:52.497Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Branko Borilovic Products: WSB Brands Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Branko Borilovic WSB Brands plugin <= 1.1.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wsb-brands/wordpress-wsb-brands-plugin-1-1-8-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47438 State: PUBLISHED Published: 2023-03-29T12:29:03.749Z Last Updated: 2025-01-10T19:14:35.693Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WpDevArt Products: Booking calendar, Appointment Booking System Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plugin-3-2-3-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47439 State: PUBLISHED Published: 2023-05-08T14:21:06.012Z Last Updated: 2025-01-09T15:24:43.408Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rocket Apps Products: Open Graphite Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rocket Apps Open Graphite plugin <= 1.6.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/open-graphite/wordpress-open-graphite-plugin-1-5-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47440 State: PUBLISHED Published: 2023-03-13T09:14:32.359Z Last Updated: 2025-01-13T15:53:56.175Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Joseph C Dolson Products: My Tickets Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/my-tickets/wordpress-my-tickets-plugin-1-9-10-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47441 State: PUBLISHED Published: 2023-05-10T10:10:10.972Z Last Updated: 2025-01-09T15:18:31.148Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Charitable Donations & Fundraising Team Products: Donation Forms by Charitable Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/charitable/wordpress-donation-forms-by-charitable-plugin-1-7-0-10-cross-site-scripting-xss?_s_i
m/database/vulnerability/charitable/wordpress-donation-forms-by-charitable-plugin-1-7-0-10-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47442 State: PUBLISHED Published: 2023-11-07T15:09:29.695Z Last Updated: 2024-09-04T20:15:28.151Z Vendors: AyeCode Ltd Products: UsersWP Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/userswp/wordpress-userswp-front-end-login-form-user-registration-user-profile-members-directory-plugin-for-wordpress-plugin-1-2-3-9-csv-injection?_s_id=cve
CVE ID: CVE-2022-47443 State: PUBLISHED Published: 2023-03-14T08:26:52.035Z Last Updated: 2025-01-13T15:52:46.053Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Daniel Powney Products: Multi Rating Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-5-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47444 State: PUBLISHED Published: 2023-03-29T12:35:44.953Z Last Updated: 2025-01-10T19:14:24.532Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ProfilePress Membership Team Products: Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin <= 4.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
Press plugin <= 4.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-paid-membership-ecommerce-registration-form-login-form-user-profile-paywall-restrict-content-profilepress-plugin-4-4-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47445 State: PUBLISHED Published: 2023-11-03T12:29:13.152Z Last Updated: 2024-09-05T17:53:42.817Z Vendors: Web-X Products: Be POPIA Compliant Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/be-popia-compliant/wordpress-be-popia-compliant-plugin-1-2-0-sql-injection?_s_id=cve
CVE ID: CVE-2022-47446 State: PUBLISHED Published: 2023-05-24T16:05:31.188Z Last Updated: 2025-01-08T22:03:13.183Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Viadat Creations Products: Store Locator for WordPress with Google Maps – LotsOfLocales Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin <= 3.98.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/store-locator/wordpress-store-locator-for-wordpress-with-google-maps-lotsoflocales-plug
stack.com/database/vulnerability/store-locator/wordpress-store-locator-for-wordpress-with-google-maps-lotsoflocales-plugin-3-98-7-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47447 State: PUBLISHED Published: 2023-05-24T16:10:09.601Z Last Updated: 2025-01-08T22:03:02.651Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mathieu Chartier Products: WordPress WP-Advanced-Search Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <= 3.3.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-advanced-search/wordpress-wp-advanced-search-plugin-3-3-8-cross-site-request-forgery-csrf?_s_id=cve