Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29397 State: PUBLISHED Published: 2022-05-10T19:50:00 Last Updated: 2024-08-03T06:17:55.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/4.setMacFilterRules
CVE ID: CVE-2022-29398 State: PUBLISHED Published: 2022-05-10T19:50:01 Last Updated: 2024-08-03T06:17:55.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/7.UploadCustomModule
CVE ID: CVE-2022-29399 State: PUBLISHED Published: 2022-05-10T19:50:01 Last Updated: 2024-08-03T06:17:54.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/9.setUrlFilterRules
CVE ID: CVE-2022-29402 State: PUBLISHED Published: 2022-05-25T17:24:29 Last Updated: 2024-08-03T06:17:55.229Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html
CVE ID: CVE-2022-29404 State: PUBLISHED Published: 2022-06-08T10:00:52 Last Updated: 2024-08-03T06:17:55.325Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-770 Description: In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2022/06/08/5 - https://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40
s://security.netapp.com/advisory/ntap-20220624-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2022-29405 State: PUBLISHED Published: 2022-05-25T07:15:11 Last Updated: 2024-08-03T06:17:55.082Z Vendors: Apache Software Foundation Products: Apache Archiva Problem Types: Apache Archiva Arbitrary user password reset vulnerability Description: In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8 Additional Analyst Notes: - CVE Program Container: References: - https://archiva.apache.org/docs/2.2.8/release-notes.html
CVE ID: CVE-2022-29406 State: PUBLISHED Published: 2022-06-15T13:14:22.499Z Last Updated: 2025-02-20T20:19:40.390Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: DynamicWebLab Products: WordPress Team Manager (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWebLab's WordPress Team Manager plugin <= 1.6.9 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-team-manager/ - https://patchstack.com/database/vulnerability/wp-team-manager/wordpress-team-manager
ress.org/plugins/wp-team-manager/ - https://patchstack.com/database/vulnerability/wp-team-manager/wordpress-team-manager-plugin-1-6-9-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2022-29408 State: PUBLISHED Published: 2022-05-25T15:58:26.224Z Last Updated: 2025-02-20T20:20:34.977Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Vsourz Digital Products: Advanced Contact form 7 DB (WordPress plugin) Problem Types: CWE-79 Description: Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/advanced-cf7-db/ - https://patchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persistent-cross-
atchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persistent-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29409 State: REJECTED Published: 2024-01-08T21:20:50.808Z Last Updated: 2024-01-08T21:35:50.293Z Description: No description available.
CVE ID: CVE-2022-29410 State: PUBLISHED Published: 2022-04-28T16:14:10.469Z Last Updated: 2025-02-20T20:24:33.245Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Mufeng Products: Hermit 音乐播放器 (WordPress plugin) Problem Types: CWE-89 Description: Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/hermit/ - https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-authenticated-sq
rg/plugins/hermit/ - https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-authenticated-sql-injection-sqli-vulnerability
CVE ID: CVE-2022-29411 State: PUBLISHED Published: 2022-04-28T16:20:29.169Z Last Updated: 2025-02-20T20:24:10.155Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Mufeng Products: Hermit 音乐播放器 (WordPress plugin) Problem Types: CWE-89 Description: SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/hermit/ - https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability
CVE ID: CVE-2022-29412 State: PUBLISHED Published: 2022-04-28T16:18:31.428Z Last Updated: 2025-02-20T20:24:17.478Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Mufeng Products: Hermit 音乐播放器 (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/hermit/ - https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-multiple-cross-site-request-forgery-
https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE ID: CVE-2022-29413 State: PUBLISHED Published: 2022-04-28T16:16:20.702Z Last Updated: 2025-02-20T20:24:25.579Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Mufeng Products: Hermit 音乐播放器 (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress via &title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/hermit/ - https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-cross-site-request-forgery-csrf-leading-to
://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-cross-site-request-forgery-csrf-leading-to-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29414 State: PUBLISHED Published: 2022-04-29T16:41:11.513Z Last Updated: 2025-02-20T20:24:02.841Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPKube Products: Subscribe To Comments Reloaded (WordPress plugin) Problem Types: CWE-352 Description: Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > ma
t all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/subscribe-to-comments-reloaded/ - https://patchstack.com/database/vulnerability/subscribe-to-comments-reloaded/wordpress-subscribe-to-comments-reloaded-plugin-211130-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE ID: CVE-2022-29415 State: PUBLISHED Published: 2022-04-28T15:34:37.186Z Last Updated: 2025-02-20T20:24:40.411Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Mati Skiba @ Rav Messer Products: Ravpage (WordPress plugin) Problem Types: CWE-79 Description: Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ravpage/ - https://patchstack.com/database/vulnerability/ravpage/wordpress-ravpage-plugin-2-16-unauthenticated-reflected-cross-site-scripting-xss-vulnerab
database/vulnerability/ravpage/wordpress-ravpage-plugin-2-16-unauthenticated-reflected-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29416 State: PUBLISHED Published: 2023-02-06T12:31:14.896Z Last Updated: 2025-01-13T15:57:45.869Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Afterpay Products: Afterpay Gateway for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/afterpay-gateway-for-woocommerce/wordpress-afterpay-gateway-for-woocommerce-plugin-3-5-0-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-29417 State: PUBLISHED Published: 2022-04-25T16:42:13.328Z Last Updated: 2025-02-20T20:25:48.278Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ShortPixel Products: ShortPixel Adaptive Images (WordPress plugin) Problem Types: CWE-284 Description: Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/shortpixel-adaptive-images/#developers - https://patchstack.com/database
nt: References: - https://wordpress.org/plugins/shortpixel-adaptive-images/#developers - https://patchstack.com/database/vulnerability/shortpixel-adaptive-images/wordpress-shortpixel-adaptive-images-plugin-3-3-1-subscriber-plugin-settings-update-vulnerability
CVE ID: CVE-2022-29418 State: PUBLISHED Published: 2022-04-25T16:53:20.761Z Last Updated: 2025-02-20T20:25:40.040Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Mark Daniels Products: Night Mode (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_setting[enable-me], &ntmode_page_setting[bg-color], &ntmode_page_setting[txt-color], &ntmode_page_setting[anc_color]. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/night-mode/
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/night-mode/#developers - https://patchstack.com/database/vulnerability/night-mode/wordpress-night-mode-plugin-1-0-0-authenticated-persistent-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29419 State: PUBLISHED Published: 2022-04-25T16:55:13.084Z Last Updated: 2025-02-20T20:25:32.803Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Don Crowther Products: 3xSocializer (WordPress plugin) Problem Types: CWE-89 Description: SQL Injection (SQLi) vulnerability in Don Crowther's 3xSocializer plugin <= 0.98.22 at WordPress possible for users with a low role like a subscriber or higher. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/3xsocializer/ - https://patchstack.com/database/vulnerability/3xsocializer/wordpress-3xsocializer-plugin-0-98-22-authenticated-sql-inj
- https://patchstack.com/database/vulnerability/3xsocializer/wordpress-3xsocializer-plugin-0-98-22-authenticated-sql-injection-sqli-vulnerability
CVE ID: CVE-2022-29420 State: PUBLISHED Published: 2022-05-06T16:53:30.706722Z Last Updated: 2024-09-16T23:26:27.890Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Adam Skaat Products: Countdown & Clock (WordPress plugin) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdown & Clock (WordPress plugin): from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerabili
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29421 State: PUBLISHED Published: 2022-05-06T16:58:42.534Z Last Updated: 2025-02-20T20:23:25.256Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Adam Skaat Products: Countdown & Clock (WordPress plugin) Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/countdown-builder/ - https://patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-0-stored-cross-site-scripti
patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-0-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29422 State: PUBLISHED Published: 2022-05-06T17:37:28.491Z Last Updated: 2025-02-20T20:23:18.289Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:L) Vendors: Adam Skaat Products: Countdown & Clock (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom, &ycd-button-margin-left, &ycd-circle-countdown-before-countdown, &ycd-circle-countdown-after-countdown vulnerable p
tom, &ycd-button-margin-left, &ycd-circle-countdown-before-countdown, &ycd-circle-countdown-after-countdown vulnerable parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/countdown-builder/#developers - https://patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-0-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2022-29423 State: PUBLISHED Published: 2022-05-06T17:40:41.844Z Last Updated: 2025-02-20T20:23:10.924Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Adam Skaat Products: Countdown & Clock (WordPress plugin) Problem Types: CWE-264 Description: Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/countdown-builder/#developers - https://patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-0-pro-features-lock-bypass-vulnerability
CVE ID: CVE-2022-29424 State: PUBLISHED Published: 2022-05-20T19:57:07.242Z Last Updated: 2025-02-20T20:21:55.653Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Biplob Adhikari Products: Image Hover Effects Ultimate (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/image-hover-effects-ultimate/#developers - https://patchstack.com/database/vulnerability/image-hover-
dpress.org/plugins/image-hover-effects-ultimate/#developers - https://patchstack.com/database/vulnerability/image-hover-effects-ultimate/wordpress-image-hover-effects-ultimate-plugin-9-7-1-authenticated-reflected-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29425 State: PUBLISHED Published: 2022-05-20T19:58:18.087Z Last Updated: 2025-02-20T20:21:48.918Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WP Wham Products: Checkout Files Upload for WooCommerce (WordPress plugin) Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/checkout-files-upload-woocommerce/#developers - https://patchstack.com/database/vulnerability/checkout-files-upload-woocommerce/wordpress-checkout-file
ce/#developers - https://patchstack.com/database/vulnerability/checkout-files-upload-woocommerce/wordpress-checkout-files-upload-for-woocommerce-plugin-2-1-2-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29426 State: PUBLISHED Published: 2022-05-20T20:03:42.354Z Last Updated: 2025-02-20T20:21:33.867Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: 2J Slideshow Team Products: Slideshow, Image Slider by 2J (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/2j-slideshow/#developers - https://patchstack.com/database/vulnerability/2j-slideshow/wo
- https://wordpress.org/plugins/2j-slideshow/#developers - https://patchstack.com/database/vulnerability/2j-slideshow/wordpress-slideshow-image-slider-by-2j-plugin-1-3-54-authenticated-reflected-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29427 State: PUBLISHED Published: 2022-05-20T20:09:54.189Z Last Updated: 2025-02-20T20:21:27.098Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Aftab Muni Products: Disable Right Click For WP (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aftab Muni's Disable Right Click For WP plugin <= 1.1.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/disable-right-click-for-wp/#developers - https://patchstack.com/database/vulnerability/disable-right-click-for-wp/wordpress-disable-right-click-for-wp-plugin-1
- https://patchstack.com/database/vulnerability/disable-right-click-for-wp/wordpress-disable-right-click-for-wp-plugin-1-1-6-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2022-29428 State: PUBLISHED Published: 2022-05-20T20:41:17.912Z Last Updated: 2025-02-20T20:21:04.332Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: Muneeb Products: WP Slider Plugin Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in Muneeb's WP Slider Plugin <= 1.4.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/simple-slider-ssp/#developers - https://patchstack.com/database/vulnerability/simple-slider-ssp/wordpress-wp-slider-plugin-1-4-5-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2022-29429 State: PUBLISHED Published: 2022-05-17T18:22:15.883Z Last Updated: 2025-02-20T20:22:55.341Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Alexander Stokmann Products: Code Snippets Extended (WordPress plugin) Problem Types: CWE-352 Description: Remote Code Execution (RCE) in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/code-snippets-extended/#developers - https://patchstack.com/database/vulnerability/code-snippets-extended/wordpress-code-snippets-extended-plu
/#developers - https://patchstack.com/database/vulnerability/code-snippets-extended/wordpress-code-snippets-extended-plugin-1-4-7-cross-site-request-forgery-csrf-leading-to-remote-code-execution-rce-vulnerability
CVE ID: CVE-2022-29430 State: PUBLISHED Published: 2022-05-20T20:44:52.437Z Last Updated: 2025-02-20T20:20:57.083Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: KubiQ Products: PNG to JPG (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/png-to-jpg/#developers - https://patchstack.com/database/vulnerability/png-to-jpg/wordpress-png-to-jpg-plugin-4-0-cross-site-requ
g/#developers - https://patchstack.com/database/vulnerability/png-to-jpg/wordpress-png-to-jpg-plugin-4-0-cross-site-request-forgery-csrf-leading-to-persistent-cross-site-scripting-xss-vulnerability