Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47117 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:01:50.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul3-A15-bof-WifiBasicSet-security-c8d0a37692dc47638135f38deb157aff
CVE ID: CVE-2022-47118 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T18:54:41.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul7-A15-bof-WifiBasicSet-wepkey1-f89406bc85b04e53ad970a7cc847df25
CVE ID: CVE-2022-47119 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:57:41.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul4-A15-bof-WifiBasicSet-ssid-a0ab1bec6d734c0f89b07a4a3867c6ba
CVE ID: CVE-2022-47120 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:57:09.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul2-A15-bof-WifiBasicSet-security_5g-15f90d2e8bd84c04b7bead52ecb37146
CVE ID: CVE-2022-47121 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:56:27.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul6-A15-bof-WifiBasicSet-wepkey-fdbf83ad4d4e49e9aea43285cc9b5979
CVE ID: CVE-2022-47122 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:55:44.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul12-A15-bof-WifiBasicSet-wrlPwd_5g-a8434999a032431bb4098933f71549e3
CVE ID: CVE-2022-47123 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:54:49.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul9-A15-bof-WifiBasicSet-wepkey3-68f034f5ba4e43f8bfe3de275c2221c0
CVE ID: CVE-2022-47124 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:54:12.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul10-A15-bof-WifiBasicSet-wepkey4-c3f45defd9e740efaa06a2f3fa8c40d8
CVE ID: CVE-2022-47125 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:53:38.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul14-A15-bof-WifiBasicSet-wrlEn_5g-4cb7b8ecc79a4063b707a9cc8a4ff579
CVE ID: CVE-2022-47126 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:52:22.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul13-A15-bof-WifiBasicSet-wrlEn-435c4b5b694140778ca491fb03a065f7
CVE ID: CVE-2022-47127 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:48:50.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul11-A15-bof-WifiBasicSet-wrlPwd-de8dbe64e48f4981a6f0f5216622b6d9
CVE ID: CVE-2022-47128 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T14:50:41.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brief-nymphea-813.notion.site/Vul8-A15-bof-WifiBasicSet-wepkey2-cfe7c57e720b44feb102979af993964b
CVE ID: CVE-2022-47129 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:04:04.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/g/alipayyz9csdbcdz/zytgq2/vz8ktghkcgvhsdzn/collaborator/join?token=R5phxzuV3w99ndZD - https://gist.github.com/Omoredream/43f60004665e9d9d8c71f7e976261387
CVE ID: CVE-2022-47130 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:40:02.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/csrf - https://www.linkedin.com/in/xvinicius/ - https://xpsec.co/blog/academy-lms-5-10-coupon-csrf
CVE ID: CVE-2022-47131 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:38:43.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/csrf - https://www.linkedin.com/in/xvinicius/ - https://portswigger.net/web-security/csrf/xss-vs-csrf - https://blog.hackingforce.com.br/en/xss - https://xpsec.co/blog/academy-lms-5-10-add-page-csrf-xss
CVE ID: CVE-2022-47132 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-03T14:47:28.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/web-security/csrf - https://www.linkedin.com/in/xvinicius/ - https://xpsec.co/blog/academy-lms-5-10-add-admin-csrf
CVE ID: CVE-2022-47134 State: PUBLISHED Published: 2023-05-20T22:51:43.231Z Last Updated: 2025-01-09T15:12:21.622Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bill Erickson Products: Gallery Metabox Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bill Erickson Gallery Metabox plugin <= 1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gallery-metabox/wordpress-gallery-metabox-plugin-1-5-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47135 State: PUBLISHED Published: 2023-05-25T08:06:32.218Z Last Updated: 2025-01-08T22:02:39.592Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: chronoengine.com Products: Chronoforms Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in chronoengine.Com Chronoforms plugin <= 7.0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/chronoforms/wordpress-chronoforms-plugin-7-0-9-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47136 State: PUBLISHED Published: 2023-05-25T11:45:57.205Z Last Updated: 2025-01-08T21:57:16.234Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WPManageNinja LLC Products: Ninja Tables – Best Data Table Plugin for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-best-data-table-plugin-for-wordpress-plugin-4-3-4-cross-site-request
e/vulnerability/ninja-tables/wordpress-ninja-tables-best-data-table-plugin-for-wordpress-plugin-4-3-4-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47137 State: PUBLISHED Published: 2023-05-10T10:04:36.113Z Last Updated: 2025-01-09T15:18:40.276Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPManageNinja LLC Products: Ninja Tables Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <= 4.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-best-data-table-plugin-for-wordpress-plugin-4-3-4-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47138 State: PUBLISHED Published: 2023-05-25T08:14:40.364Z Last Updated: 2025-01-08T22:02:18.205Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: German Krutov Products: LOGIN AND REGISTRATION ATTEMPTS LIMIT Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin <= 2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/login-attempts-limit-wp/wordpress-login-and-registration-attempts-limit-plugin-2-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47139 State: PUBLISHED Published: 2023-05-25T08:10:42.800Z Last Updated: 2025-01-08T22:02:28.327Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Damir Calusic Products: WP Basic Elements Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Damir Calusic WP Basic Elements plugin <= 5.2.15 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-basic-elements/wordpress-wp-basic-elements-plugin-5-2-15-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47140 State: PUBLISHED Published: 2023-06-12T12:52:04.870Z Last Updated: 2024-10-10T17:29:57.574Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Repute InfoSystems Products: ARMember Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47141 State: PUBLISHED Published: 2023-03-14T08:55:25.435Z Last Updated: 2025-01-13T15:52:23.215Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Seerox Products: WP Dynamic Keywords Injector Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dynamic-keywords-injector/wordpress-wp-dynamic-keywords-injector-plugin-2-3-15-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47142 State: PUBLISHED Published: 2023-05-22T08:52:10.136Z Last Updated: 2025-01-09T15:11:13.831Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Plugincraft Products: Mediamatic – Media Library Folders Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mediamatic/wordpress-mediamatic-media-library-folders-plugin-2-8-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47143 State: PUBLISHED Published: 2023-03-14T08:58:53.038Z Last Updated: 2025-01-13T15:52:15.859Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Themeisle Products: Multiple Page Generator Plugin – MPG Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multiple-pages-generator-by-porthas/wordpress-multiple-pages-generator-by-themeisle-plugin-3-3-9-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47144 State: PUBLISHED Published: 2023-05-25T11:42:01.229Z Last Updated: 2025-01-08T21:57:27.096Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Plugincraft Products: Mediamatic – Media Library Folders Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mediamatic/wordpress-mediamatic-media-library-folders-plugin-2-8-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47145 State: PUBLISHED Published: 2023-03-23T16:03:07.923Z Last Updated: 2025-02-19T21:38:02.753Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Blockonomics Products: WordPress Bitcoin Payments – Blockonomics Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments – Blockonomics plugin <= 3.5.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blockonomics-bitcoin-payments/wordpress-wordpress-bitcoin-payments-blockonomics-plugin-3-5-7-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47146 State: PUBLISHED Published: 2023-03-27T14:00:49.863Z Last Updated: 2025-01-10T19:16:15.960Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Contempoinc Products: Real Estate 7 WordPress Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/realestate-7/wordpress-real-estate-7-theme-3-3-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47147 State: PUBLISHED Published: 2023-03-14T08:30:56.148Z Last Updated: 2025-01-13T15:52:38.358Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Kesz1 Technologies Products: ipBlockList Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kesz1 Technologies ipBlockList plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ipblocklist/wordpress-ipblocklist-plugin-1-0-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47148 State: PUBLISHED Published: 2023-03-01T14:25:48.105Z Last Updated: 2025-01-13T15:54:09.903Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Overnight Products: PDF Invoices & Packing Slips for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to popup dismiss. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-pdf-invoices-packing-slips/wordpress-pdf-invoices-packing-slips-for-woocommerce-plugin-3-2-5-cross-s
ability/woocommerce-pdf-invoices-packing-slips/wordpress-pdf-invoices-packing-slips-for-woocommerce-plugin-3-2-5-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47149 State: PUBLISHED Published: 2023-05-25T09:13:47.504Z Last Updated: 2025-01-08T22:00:25.765Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Pretty Links Products: Pretty Links Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pretty Links plugin <= 3.4.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pretty-link/wordpress-pretty-links-affiliate-links-link-branding-link-tracking-marketing-plugin-plugin-3-4-0-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47151 State: PUBLISHED Published: 2024-04-17T10:17:37.447Z Last Updated: 2024-08-03T14:47:29.285Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: JS Help Desk Products: JS Help Desk – Best Help Desk & Support Plugin Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/js-support-
CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-47152 State: PUBLISHED Published: 2023-05-24T15:52:00.514Z Last Updated: 2025-01-08T22:03:47.889Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Etison, LLC Products: ClickFunnels Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Etison, LLC ClickFunnels plugin <= 3.1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/clickfunnels/wordpress-clickfunnels-plugin-3-1-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47153 State: PUBLISHED Published: 2024-03-29T13:09:36.401Z Last Updated: 2024-08-08T16:12:32.950Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPJobBoard Products: Jobeleon Theme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPJobBoard Jobeleon Theme allows Reflected XSS.This issue affects Jobeleon Theme: from n/a through 1.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jobeleon-wpjobboard/wordpress-jobeleon-theme-1-9-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47154 State: PUBLISHED Published: 2023-03-14T07:11:40.511Z Last Updated: 2025-01-13T15:52:53.231Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Pi Websolution Products: CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2.4.49 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/css-js-manager/wordpress-css-js-manager-async-javas
ichment: References: - https://patchstack.com/database/vulnerability/css-js-manager/wordpress-css-js-manager-async-javascript-defer-render-blocking-css-supports-woocommerce-plugin-2-4-49-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47155 State: PUBLISHED Published: 2023-03-14T06:58:31.764Z Last Updated: 2025-01-13T15:53:00.224Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Supsystic Products: Slider by Supsystic Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/slider-by-supsystic/wordpress-slider-by-supsystic-plugin-1-8-4-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-47157 State: PUBLISHED Published: 2023-05-18T10:09:47.433Z Last Updated: 2025-02-19T21:30:15.976Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Don Benjamin Products: WP Custom Fields Search Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-custom-fields-search/wordpress-wp-custom-fields-search-plugin-1-2-34-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47158 State: PUBLISHED Published: 2023-04-24T14:16:12.805Z Last Updated: 2025-01-09T15:35:48.303Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Pakpobox Products: alfred24 Click & Collect Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/alfred-click-collect/wordpress-alfred24-click-collect-plugin-1-1-7-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-47159 State: PUBLISHED Published: 2023-05-25T08:17:40.432Z Last Updated: 2025-01-08T22:02:09.369Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Logaster Products: Logaster Logo Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Logaster Logaster Logo Generator plugin <= 1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/logaster-logo-generator/wordpress-logaster-logo-generator-plugin-1-3-cross-site-request-forgery-csrf?_s_id=cve