Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45315 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:49:10.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2022-45315/README.md
CVE ID: CVE-2022-45320 State: PUBLISHED Published: 2024-02-20T00:00:00.000Z Last Updated: 2025-03-28T20:43:01.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-45320
CVE ID: CVE-2022-45326 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:18:36.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.kwoksys.com/wiki/index.php?title=Release_Notes - https://www.navsec.net/2022/11/12/kwoksys-xxe.html
CVE ID: CVE-2022-45328 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:28:03.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zhangzhaoyuela/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-1.md
CVE ID: CVE-2022-45329 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T15:29:43.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/search_sql_injection/search_sql_injection.md
CVE ID: CVE-2022-45330 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-25T21:05:38.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rdyx0.github.io/2018/09/02/AeroCMS-v0.0.1-SQLi%20category_sql_injectin/ - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/category_sql_injection/category_sql_injection.md
CVE ID: CVE-2022-45331 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-25T21:04:14.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rdyx0.github.io/2018/09/03/AeroCMS-v0.0.1-SQLi%20post_sql_injectin/ - https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/post_sql_injection/post_sql_injection.md
CVE ID: CVE-2022-45332 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:23:06.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LibreDWG/libredwg/issues/524
CVE ID: CVE-2022-45337 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:21:20.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/no1rr/Vulnerability/tree/master/Tenda/TX9Pro/1
CVE ID: CVE-2022-45338 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:36:55.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/MaxRozendaal/633b34a4675b60caed736e5ffe28f272
CVE ID: CVE-2022-45343 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-05-02T19:13:29.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2315 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-45347 State: PUBLISHED Published: 2022-12-22T10:47:44.716Z Last Updated: 2025-04-15T13:41:08.826Z Vendors: Apache Software Foundation Products: Apache ShardingSphere-Proxy Problem Types: CWE-459 Description: Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session completely after client authentication failed, which allowed an attacker to execute normal commands by constructing a special MySQL client. This vulnerability has been fixed in Apache ShardingSphere 5.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/l5rz7j4rg10o7ywtgknh2f5hxnv6yw3
rogram Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/l5rz7j4rg10o7ywtgknh2f5hxnv6yw3l
CVE ID: CVE-2022-45348 State: PUBLISHED Published: 2023-11-07T16:52:15.104Z Last Updated: 2024-09-04T16:25:18.330Z Vendors: anmari Products: amr users Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/amr-users/wordpress-amr-users-plugin-4-59-4-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-45349 State: PUBLISHED Published: 2024-03-25T11:18:02.198Z Last Updated: 2024-08-03T14:09:56.852Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Muffingroup Products: Betheme Problem Types: CWE-862 Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-4?_s_id=cve
CVE ID: CVE-2022-45350 State: PUBLISHED Published: 2023-11-07T15:05:07.074Z Last Updated: 2024-09-04T19:06:54.735Z Vendors: Pär Thernström Products: Simple History – user activity log, audit tool Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-history/wordpress-simple-history-plugin-3-3-1-csv-injection-vulnerability?_s_id=cve
CVE ID: CVE-2022-45351 State: PUBLISHED Published: 2024-03-25T11:19:47.208Z Last Updated: 2024-08-03T14:09:56.848Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Muffingroup Products: Betheme Problem Types: CWE-862 Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-5?_s_id=cve
CVE ID: CVE-2022-45352 State: PUBLISHED Published: 2024-03-25T11:21:52.522Z Last Updated: 2024-08-03T14:09:56.660Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Muffingroup Products: Betheme Problem Types: CWE-862 Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2022-45353 State: PUBLISHED Published: 2023-01-14T10:53:27.096Z Last Updated: 2025-01-13T15:59:36.779Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Muffingroup Products: Betheme Problem Types: CWE-863 Description: Broken Access Control in Betheme theme <= 26.6.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45354 State: PUBLISHED Published: 2024-01-08T20:45:20.169Z Last Updated: 2024-11-14T17:35:35.314Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WPChill Products: Download Monitor Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-7-60-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2022-45355 State: PUBLISHED Published: 2023-03-29T18:35:28.901Z Last Updated: 2025-01-10T19:13:57.858Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L) Vendors: ThimPress Products: WP Pipes Problem Types: CWE-89 Description: Auth. (admin+) SQL Injection (SQLi) vulnerability in ThimPress WP Pipes plugin <= 1.33 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-pipes/wordpress-wp-pipes-plugin-1-33-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-45356 State: PUBLISHED Published: 2024-03-25T11:23:34.337Z Last Updated: 2024-08-08T18:22:05.745Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Muffingroup Products: Betheme Problem Types: CWE-862 Description: Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-3?_s_id=cve
CVE ID: CVE-2022-45357 State: PUBLISHED Published: 2023-11-07T15:45:27.784Z Last Updated: 2024-09-05T14:16:37.175Z Vendors: Lenderd Products: 1003 Mortgage Application Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/1003-mortgage-application/wordpress-1003-mortgage-application-plugin-1-73-csv-injection?_s_id=cve
CVE ID: CVE-2022-45358 State: PUBLISHED Published: 2023-04-13T11:36:59.545Z Last Updated: 2025-01-10T18:54:37.502Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Silkalns Products: Activello Problem Types: CWE-79 Description: Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/activello/wordpress-activello-theme-1-4-4-auth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45359 State: PUBLISHED Published: 2022-12-06T20:36:45.061Z Last Updated: 2025-02-20T19:48:21.629Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: YITH Products: YITH WooCommerce Gift Cards Problem Types: CWE-434 Description: Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-19-0-unauth-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2022-45360 State: PUBLISHED Published: 2023-11-07T16:58:20.804Z Last Updated: 2024-09-04T19:04:12.158Z Vendors: Scott Reilly Products: Commenter Emails Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/commenter-emails/wordpress-commenter-emails-plugin-2-6-1-csv-injection?_s_id=cve
CVE ID: CVE-2022-45361 State: PUBLISHED Published: 2023-04-23T09:52:05.159Z Last Updated: 2025-01-10T18:46:20.960Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Boris Kuzmanov Products: 0mk Shortener Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Boris Kuzmanov 0mk Shortener plugin <= 0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/0mk-shortener/wordpress-0mk-shortener-plugin-0-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-45362 State: PUBLISHED Published: 2023-12-07T11:05:04.334Z Last Updated: 2024-08-03T14:09:57.023Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Paytm Products: Paytm Payment Gateway Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45363 State: PUBLISHED Published: 2022-11-22T07:45:08.482053Z Last Updated: 2024-09-16T19:14:11.797Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Muffingroup Products: Betheme Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45364 State: PUBLISHED Published: 2023-05-24T15:48:57.403Z Last Updated: 2025-01-08T22:04:01.133Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Glen Don L. Mongaya Products: Drag and Drop Multiple File Upload – Contact Form 7 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.6.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/drag-and-drop-multiple-file-upload-contact-form-7/wordpress-drag-and-drop-multiple-file-upload-con
atabase/vulnerability/drag-and-drop-multiple-file-upload-contact-form-7/wordpress-drag-and-drop-multiple-file-upload-contact-form-7-plugin-1-3-6-5-multiple-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-45365 State: PUBLISHED Published: 2023-12-14T14:46:03.098Z Last Updated: 2024-08-03T14:09:57.044Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aleksandar Urošević Products: Stock Ticker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/stock-ticker/wordpress-stock-ticker-plugin-3-23-2-reflected-cross-site-scripting-xss-vulnerability?_s_
ase/vulnerability/stock-ticker/wordpress-stock-ticker-plugin-3-23-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45366 State: PUBLISHED Published: 2023-05-25T12:08:09.609Z Last Updated: 2024-10-10T18:57:25.582Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Crouse, VeronaLabs Products: Slimstat Analytics Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45367 State: PUBLISHED Published: 2023-05-25T09:55:12.442Z Last Updated: 2025-01-08T21:59:45.608Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Tyche Softwares Products: Custom Order Numbers for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin <= 1.4.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/custom-order-numbers-for-woocommerce/wordpress-custom-order-numbers-for-woocommerce-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerabi
rs-for-woocommerce/wordpress-custom-order-numbers-for-woocommerce-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45368 State: PUBLISHED Published: 2024-05-17T06:28:21.465Z Last Updated: 2024-08-03T14:09:57.035Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Lenderd Products: 1003 Mortgage Application Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Lenderd 1003 Mortgage Application allows Relative Path Traversal.This issue affects 1003 Mortgage Application: from n/a through 1.75. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/1003-mortgage-application/wordpress-1003-mortgage-applicatio
References: - https://patchstack.com/database/vulnerability/1003-mortgage-application/wordpress-1003-mortgage-application-plugin-1-73-local-file-inclusion?_s_id=cve
CVE ID: CVE-2022-45369 State: PUBLISHED Published: 2022-11-18T21:51:16.739Z Last Updated: 2025-02-20T19:51:41.118Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: RichPlugins Products: Plugin for Google Reviews (WordPress plugin) Problem Types: CWE-264 Description: Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-2-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45370 State: PUBLISHED Published: 2023-11-07T16:56:09.718Z Last Updated: 2025-02-19T21:19:24.884Z Vendors: WebToffee Products: WordPress Comments Import & Export Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/comments-import-export-woocommerce/wordpress-wordpress-comments-import-export-plugin-2-3-1-csv-injection?_s_id=cve
CVE ID: CVE-2022-45371 State: PUBLISHED Published: 2023-05-25T10:38:10.764Z Last Updated: 2025-01-08T21:58:40.351Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Wpmet Products: ShopEngine Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet ShopEngine plugin <= 4.1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shopengine/wordpress-shopengine-plugin-4-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45372 State: PUBLISHED Published: 2023-05-29T00:15:46.390Z Last Updated: 2024-11-01T13:01:52.483Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Codeixer Products: Product Gallery Slider for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin <= 2.2.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-product-gallery-slider/wordpress-product-gallery-slider-for-woocommerce-plugin-2-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45373 State: PUBLISHED Published: 2023-11-06T07:50:54.905Z Last Updated: 2024-09-05T14:12:37.308Z Vendors: Jason Crouse, VeronaLabs Products: Slimstat Analytics Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-4-sql-injection-sqli-vulnerability?_s_id=cve