Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27817 State: PUBLISHED Published: 2022-04-14T16:35:51 Last Updated: 2024-08-03T05:33:00.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://www.openwall.com/lists/oss-security/2022/04/14/1
CVE ID: CVE-2022-27818 State: PUBLISHED Published: 2022-04-07T01:35:32 Last Updated: 2024-08-03T05:33:00.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://github.com/waycrate/swhkd/commit/f70b99dd575fab79d8a942111a6980431f006818 - http://www.openwall.com/lists/oss-security/2022/04/14/1
CVE ID: CVE-2022-27819 State: PUBLISHED Published: 2022-04-07T01:31:41 Last Updated: 2024-08-03T05:32:59.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waycrate/swhkd/releases - https://github.com/waycrate/swhkd/commit/b4e6dc76f4845ab03104187a42ac6d1bbc1e0021 - http://www.openwall.com/lists/oss-security/2022/04/14/1
CVE ID: CVE-2022-27820 State: PUBLISHED Published: 2022-03-24T03:33:14 Last Updated: 2024-08-03T05:41:09.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/03/23/1 - https://github.com/zaproxy/zaproxy/releases - http://www.openwall.com/lists/oss-security/2022/03/24/3
CVE ID: CVE-2022-27821 State: PUBLISHED Published: 2022-04-11T19:37:17 Last Updated: 2024-08-03T05:41:09.851Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27822 State: PUBLISHED Published: 2022-04-11T19:37:18 Last Updated: 2024-08-03T05:41:09.920Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27823 State: PUBLISHED Published: 2022-04-11T19:37:18 Last Updated: 2024-08-03T05:41:09.867Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27824 State: PUBLISHED Published: 2022-04-11T19:37:19 Last Updated: 2024-08-03T05:41:09.921Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27825 State: PUBLISHED Published: 2022-04-11T19:37:20 Last Updated: 2024-08-03T05:41:10.131Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27826 State: PUBLISHED Published: 2022-04-11T19:37:21 Last Updated: 2024-08-03T05:41:09.929Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27827 State: PUBLISHED Published: 2022-04-11T19:37:21 Last Updated: 2024-08-03T05:41:10.110Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27828 State: PUBLISHED Published: 2022-04-11T19:37:22 Last Updated: 2024-08-03T05:41:09.894Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27829 State: PUBLISHED Published: 2022-04-11T19:37:23 Last Updated: 2024-08-03T05:41:09.929Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27830 State: PUBLISHED Published: 2022-04-11T19:37:24 Last Updated: 2024-08-03T05:41:10.070Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27831 State: PUBLISHED Published: 2022-04-11T19:37:25 Last Updated: 2024-08-03T05:41:09.867Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27832 State: PUBLISHED Published: 2022-04-11T19:37:26 Last Updated: 2024-08-03T05:41:09.930Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Description: Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27833 State: PUBLISHED Published: 2022-04-11T19:37:26 Last Updated: 2024-08-03T05:41:10.008Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27834 State: PUBLISHED Published: 2022-04-11T19:37:27 Last Updated: 2024-08-03T05:41:09.915Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-367 Description: Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27835 State: PUBLISHED Published: 2022-04-11T19:37:28 Last Updated: 2024-08-03T05:41:09.863Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27836 State: PUBLISHED Published: 2022-04-11T19:37:29 Last Updated: 2024-08-03T05:41:09.966Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&mo
nalyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE ID: CVE-2022-27837 State: PUBLISHED Published: 2022-04-11T19:37:29 Last Updated: 2024-08-03T05:41:09.862Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Accessibility Problem Types: CWE-94 Description: A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE ID: CVE-2022-27838 State: PUBLISHED Published: 2022-04-11T19:37:30 Last Updated: 2024-08-03T05:41:09.898Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: FactoryCamera Problem Types: CWE-284 Description: Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27839 State: PUBLISHED Published: 2022-04-11T19:37:31 Last Updated: 2024-08-03T05:41:10.023Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-287 Description: Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27840 State: PUBLISHED Published: 2022-04-11T19:37:32 Last Updated: 2024-08-03T05:41:09.882Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Recovery Problem Types: CWE-269 Description: Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27841 State: PUBLISHED Published: 2022-04-11T19:37:33 Last Updated: 2024-08-03T05:41:09.891Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-703 Description: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27842 State: PUBLISHED Published: 2022-04-11T19:37:33 Last Updated: 2024-08-03T05:41:10.050Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Smart Switch PC Problem Types: CWE-20 Description: DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27843 State: PUBLISHED Published: 2022-04-11T19:37:34 Last Updated: 2024-08-03T05:41:09.926Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Kies Problem Types: CWE-20 Description: DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE ID: CVE-2022-27844 State: PUBLISHED Published: 2022-04-11T19:38:16.448Z Last Updated: 2025-02-20T20:27:58.049Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: WPvivid Team Products: Migration, Backup, Staging – WPvivid (WordPress plugin) Problem Types: CWE-200 Description: Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpvivid-backuprestore/#developers - https://patchstack.com/database/vulnerability/wpvivid-backuprestore/wordpress-wpvivid-plugin-0-9-70-arbitrary-
elopers - https://patchstack.com/database/vulnerability/wpvivid-backuprestore/wordpress-wpvivid-plugin-0-9-70-arbitrary-file-read-vulnerability
CVE ID: CVE-2022-27845 State: PUBLISHED Published: 2022-04-11T19:38:17.237Z Last Updated: 2025-02-20T20:27:50.459Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: PlausibleHQ Products: Plausible Analytics (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/plausible-analytics/#developers - https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authe
ers - https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-27846 State: PUBLISHED Published: 2022-04-13T17:05:53.335Z Last Updated: 2025-02-20T20:27:11.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Yooslider Products: Yoo Slider – Image Slider & Video Slider (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/yoo-slider/#developers - https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-r
er/#developers - https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability-leading-to-slider-creation-modification
CVE ID: CVE-2022-27847 State: PUBLISHED Published: 2022-04-13T17:05:52.527Z Last Updated: 2025-02-20T20:27:18.775Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Yooslider Products: Yoo Slider – Image Slider & Video Slider (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import templates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/yoo-slider/#developers - https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-
elopers - https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability-leading-to-template-import
CVE ID: CVE-2022-27848 State: PUBLISHED Published: 2022-04-14T20:05:48.495Z Last Updated: 2025-02-20T20:27:03.966Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: Webnus Products: Modern Events Calendar Lite (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/modern-events-calendar-lite/#developers - https://patchstack.com/database/vulnerability/modern-events-calendar-lite/wordpress-modern-events-calendar-lite-plugin-6-5-1
s://patchstack.com/database/vulnerability/modern-events-calendar-lite/wordpress-modern-events-calendar-lite-plugin-6-5-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-27849 State: PUBLISHED Published: 2022-04-15T16:24:44.617Z Last Updated: 2025-02-20T20:26:56.925Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Jeff Starr Products: Simple Ajax Chat (WordPress plugin) Problem Types: CWE-200 Description: Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/simple-ajax-chat/#developers - https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability
CVE ID: CVE-2022-27850 State: PUBLISHED Published: 2022-04-15T16:24:45.573Z Last Updated: 2025-02-20T20:26:49.620Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Jeff Starr Products: Simple Ajax Chat (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/simple-ajax-chat/#developers - https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-m
developers - https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2022-27851 State: PUBLISHED Published: 2022-04-15T16:24:46.324Z Last Updated: 2025-02-20T20:26:41.629Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Dnesscarkey Products: Use Any Font | Custom Font Uploader (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/use-any-font/ - https://patchstack.com/database/vulnerability/use-any-font/wordpress-use-any-font-plugin-6-1-7-cross-site-request-forgery-csrf-vul
tchstack.com/database/vulnerability/use-any-font/wordpress-use-any-font-plugin-6-1-7-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2022-27852 State: PUBLISHED Published: 2022-04-15T16:24:47.789977Z Last Updated: 2024-09-16T19:47:08.613Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WPChill Media Labs L.L.C Products: KB Support Problem Types: CWE-79 Description: Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-27853 State: PUBLISHED Published: 2022-04-18T16:20:34.107Z Last Updated: 2025-02-20T20:26:14.709Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Contest Gallery Products: Contest Gallery (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/contest-gallery/ - https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-13-1-0-9-authenticated-stored-cross-site-scripting-
abase/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-13-1-0-9-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-27854 State: PUBLISHED Published: 2022-04-26T18:36:08.322Z Last Updated: 2025-02-20T20:25:05.179Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Alexander Ustimenko Products: Psychological tests & quizzes (WordPress plugin) Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher role via &wpt_test_page_submit_button_caption parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-testing/ - https://patchstack
Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-testing/ - https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability-1