deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-42475
Published: 2023-01-02
Description: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-197, CWE-787
References: https://fortiguard.com/psirt/FG-IR-22-398; https://fortiguard.com/psirt/FG-IR-22-398; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475
CVE: CVE-2014-125034
Published: 2023-01-02
Description: A vulnerability has been found in stiiv contact_app and classified as problematic. Affected by this vulnerability is the function render of the file libs/View.php. The manipulation of the argument var leads to cross site scripting. The attack can be launched remotely. The patch is named 67bec33f559da9d41a1b45eb9e992bd8683a7f8c. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217183.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/stiiv/contact_app/commit/67bec33f559da9d41a1b45eb9e992bd8683a7f8c; https://vuldb.com/?ctiid.217183; https://vuldb.com/?id.217183
CVE: CVE-2015-10007
Published: 2023-01-02
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217184. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/82Flex/WEIPDCRM/commit/43bad79392332fa39e31b95268e76fbda9fec3a4; https://vuldb.com/?ctiid.217184; https://vuldb.com/?id.217184
CVE: CVE-2015-10008
Published: 2023-01-02
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier VDB-217185 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/82Flex/WEIPDCRM/commit/43bad79392332fa39e31b95268e76fbda9fec3a4; https://vuldb.com/?ctiid.217185; https://vuldb.com/?id.217185
CVE: CVE-2019-25093
Published: 2023-01-02
Description: A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the function recentthread_list_threads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler. The manipulation of the argument recentthread_forumskip leads to cross site scripting. It is possible to launch the attack remotely. The patch is identified as 051465d807a8fcc6a8b0f4bcbb[PII_REDACTED]f48. It is recommended to apply a patch to fix this issue. VDB-217182 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/dragonexpert/recentthreads/commit/051465d807a8fcc6a8b0f4bcbb[PII_REDACTED]f48; https://vuldb.com/?ctiid.217182; https://vuldb.com/?id.217182
CVE: CVE-2014-125035
Published: 2023-01-02
Description: A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier of the patch is b8a56718b1d42834c6ec51d9c489c5dc20471d7b. It is recommended to apply a patch to fix this issue. The identifier VDB-217189 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/mrbobbybryant/Jobs-Plugin/commit/b8a56718b1d42834c6ec51d9c489c5dc20471d7b; https://github.com/mrbobbybryant/Jobs-Plugin/pull/2; https://vuldb.com/?ctiid.217189
CVE: CVE-2015-10009
Published: 2023-01-02
Description: A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/code_caller_controller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/* leads to code injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.1 is able to address this issue. The patch is named fba7d89176fba8fe289edd58835fe45080797d99. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217187.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/nonfiction/nterchange_backend/commit/fba7d89176fba8fe289edd58835fe45080797d99; https://github.com/nonfiction/nterchange_backend/releases/tag/4.1.1; https://vuldb.com/?ctiid.217187
CVE: CVE-2017-20161
Published: 2023-01-02
Description: A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-74
References: https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb; https://vuldb.com/?ctiid.217188; https://vuldb.com/?id.217188
CVE: CVE-2022-48197
Published: 2023-01-02
Description: Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html; https://github.com/ryan412/CVE-2022-48197; https://github.com/ryan412/CVE-2022-48197/blob/main/README.md
CVE: CVE-2023-22451
Published: 2023-01-02
Description: Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation in place which would prevent them from picking an easy to guess password. This issue is resolved by providing defaults for the `AUTH_PASSWORD_VALIDATORS` configuration setting. As of version 11.7, the password can’t be too similar to other personal information, must contain at least 10 characters, can’t be a commonly used password, and can’t be entirely numeric. As a workaround, an administrator may reset all passwords in Kiwi TCMS if they think a weak password may have been chosen. 
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-521, CWE-521
References: https://github.com/kiwitcms/Kiwi/commit/3759fb68aed36315cdde9fc573b2fe7c11544985; https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-496x-2jqf-hp7g; https://huntr.dev/bounties/32a873c8-f605-4aae-9272-d80985ef2b73
CVE: CVE-2014-125037
Published: 2023-01-02
Description: A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217191.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/elizabrock/license-to-kill/commit/cd11cf174f361c98e9b1b4c281aa7b77f46b5078; https://vuldb.com/?ctiid.217191; https://vuldb.com/?id.217191
CVE: CVE-2014-125038
Published: 2023-01-02
Description: A vulnerability has been found in IS_Projecto2 and classified as critical. This vulnerability affects unknown code of the file Cnn-EJB/ejbModule/ejbs/NewsBean.java. The manipulation of the argument date leads to sql injection. The name of the patch is aa128b2c9c9fdcbbf5ecd82c1e[PII_REDACTED]7fe0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217192.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/rfsimoes/IS_Projecto2/commit/aa128b2c9c9fdcbbf5ecd82c1e[PII_REDACTED]7fe0; https://vuldb.com/?ctiid.217192; https://vuldb.com/?id.217192
CVE: CVE-2014-125036
Published: 2023-01-02
Description: A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as ed4ca2cf012677973c220cdba36b5c60bfa0260b. It is recommended to apply a patch to fix this issue. VDB-217190 is the identifier assigned to this vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-406
References: https://github.com/drybjed/ansible-ntp/commit/ed4ca2cf012677973c220cdba36b5c60bfa0260b; https://vuldb.com/?ctiid.217190; https://vuldb.com/?id.217190
CVE: CVE-2016-15007
Published: 2023-01-02
Description: A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to injection. The patch is named db03ac5b8a9d830095991b529c067a030a0ccf7b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217195.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74
References: https://github.com/scottbcovert/Centralized-Salesforce-Dev-Framework/commit/db03ac5b8a9d830095991b529c067a030a0ccf7b; https://vuldb.com/?ctiid.217195; https://vuldb.com/?id.217195
CVE: CVE-2023-22452
Published: 2023-01-02
Description: kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured. Thus anyone who has access to the channel ID they wish to change settings for and the server settings panel for any server could change settings for the requested channel no matter which server it belonged to. Commit a947d7c resolves the issue and has been deployed to the official instance of the bot. The only workaround that exists is to disable the web config entirely by changing it to run on localhost. Note that a workaround is only necessary for those who run their own instance of the bot.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/Kenny2github/kenny2automate/commit/a947d7ce408687b587c7e6dfd6026f7c4ee31ac2; https://github.com/Kenny2github/kenny2automate/security/advisories/GHSA-73j8-xrcr-q6j7; https://github.com/Kenny2github/kenny2automate/commit/a947d7ce408687b587c7e6dfd6026f7c4ee31ac2
CVE: CVE-2015-10010
Published: 2023-01-02
Description: A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The name of the patch is c680170d5583cd9342fe1af43001fe8b2b8004dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217196.
CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://github.com/opendns/OpenResolve/commit/c680170d5583cd9342fe1af43001fe8b2b8004dd; https://vuldb.com/?ctiid.217196; https://vuldb.com/?id.217196
CVE: CVE-2015-10011
Published: 2023-01-02
Description: A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is recommended to apply a patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://github.com/opendns/OpenResolve/commit/9eba6ba5abd89d0e36a008921eb307fcef8c5311; https://vuldb.com/?ctiid.217197; https://vuldb.com/?id.217197
CVE: CVE-2022-3241
Published: 2023-01-02
Description: The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/a995dd67-43fc-4087-a7f1-5db57f4c828c; https://wpscan.com/vulnerability/a995dd67-43fc-4087-a7f1-5db57f4c828c
CVE: CVE-2022-3860
Published: 2023-01-02
Description: The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/d99ce21f-fbb6-429c-aa3b-19c4a5eb7557; https://wpscan.com/vulnerability/d99ce21f-fbb6-429c-aa3b-19c4a5eb7557
CVE: CVE-2022-3911
Published: 2023-01-02
Description: The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber can grant themselves any privileges, such as edit_plugins etc
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/c47fdca8-74ac-48a4-9780-556927fb4e52; https://wpscan.com/vulnerability/c47fdca8-74ac-48a4-9780-556927fb4e52
CVE: CVE-2022-3936
Published: 2023-01-02
Description: The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow high-privilege users such as editors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in a multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/921daea1-a06d-4310-8bd9-4db32605e500; https://wpscan.com/vulnerability/921daea1-a06d-4310-8bd9-4db32605e500
CVE: CVE-2022-3994
Published: 2023-01-02
Description: The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in certain configurations.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/802a2139-ab48-4281-888f-225e6e3134aa; https://wpscan.com/vulnerability/802a2139-ab48-4281-888f-225e6e3134aa
CVE: CVE-2022-4049
Published: 2023-01-02
Description: The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/9b0781e2-ad62-4308-bafc-d45b9a2472be; https://wpscan.com/vulnerability/9b0781e2-ad62-4308-bafc-d45b9a2472be
CVE: CVE-2022-4057
Published: 2023-01-02
Description: The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://wpscan.com/vulnerability/95ee1b9c-1971-4c35-8527-5764e9ed64af; https://wpscan.com/vulnerability/95ee1b9c-1971-4c35-8527-5764e9ed64af
CVE: CVE-2022-4059
Published: 2023-01-02
Description: The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/d94bb664-261a-4f3f-8cc3-a2db8230895d; https://wpscan.com/vulnerability/d94bb664-261a-4f3f-8cc3-a2db8230895d
CVE: CVE-2022-4099
Published: 2023-01-02
Description: The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/a282dd39-926d-406b-b8f5-e4c6e0c2c028; https://wpscan.com/vulnerability/a282dd39-926d-406b-b8f5-e4c6e0c2c028
CVE: CVE-2022-4109
Published: 2023-01-02
Description: The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even when they should not be able to (for example in multisite)
CVSS Score: 2.7 (LOW)
References: https://wpscan.com/vulnerability/51e023de-189d-4557-9655-23f7ba58b670; https://wpscan.com/vulnerability/51e023de-189d-4557-9655-23f7ba58b670
CVE: CVE-2022-4114
Published: 2023-01-02
Description: The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://themeforest.net/item/superio-job-board-wordpress-theme/32180231; https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd; https://themeforest.net/item/superio-job-board-wordpress-theme/32180231
CVE: CVE-2022-4119
Published: 2023-01-02
Description: The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/11040133-c134-4f96-8421-edd04901ed0d; https://wpscan.com/vulnerability/11040133-c134-4f96-8421-edd04901ed0d
CVE: CVE-2022-4140
Published: 2023-01-02
Description: The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/0d649a7e-3334-48f7-abca-fff0856e12c7; https://wpscan.com/vulnerability/0d649a7e-3334-48f7-abca-fff0856e12c7
CVE: CVE-2022-4142
Published: 2023-01-02
Description: The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg_gallery_filters ajax action before outputting them on the page, allowing a high privileged user such as an administrator to inject HTML or javascript to the plugin settings page, even when the unfiltered_html capability is disabled.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/8c2adadd-0684-49a8-9185-0c7d9581aef1; https://wpscan.com/vulnerability/8c2adadd-0684-49a8-9185-0c7d9581aef1
CVE: CVE-2022-4198
Published: 2023-01-02
Description: The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://security.gentoo.org/glsa/202305-33; https://wpscan.com/vulnerability/ba372400-96f7-45a9-9e89-5984ecc4d1e2; https://security.gentoo.org/glsa/202305-33
CVE: CVE-2022-4200
Published: 2023-01-02
Description: The Login with Cognito WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/ac2e3fea-e1e6-4d90-9945-d8434a00a3cf; https://wpscan.com/vulnerability/ac2e3fea-e1e6-4d90-9945-d8434a00a3cf
CVE: CVE-2022-4236
Published: 2023-01-02
Description: The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://wpscan.com/vulnerability/436d8894-dab8-41ea-8ed0-a3338aded635; https://wpscan.com/vulnerability/436d8894-dab8-41ea-8ed0-a3338aded635
CVE: CVE-2022-4237
Published: 2023-01-02
Description: The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist() functions via various AJAX actions available to any authenticated users, which could allow users with a role as low as subscriber to perform PHAR deserialisation when they can upload a file and a suitable gadget chain is present on the blog
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/7a4b790c-49ae-46bc-9544-e188deae243f; https://wpscan.com/vulnerability/7a4b790c-49ae-46bc-9544-e188deae243f
CVE: CVE-2022-4256
Published: 2023-01-02
Description: The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/f5b17c68-c2b0-4d0d-bb7b-19dc30511a89; https://wpscan.com/vulnerability/f5b17c68-c2b0-4d0d-bb7b-19dc30511a89
CVE: CVE-2022-4260
Published: 2023-01-02
Description: The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/d0cf24be-df87-4e1f-aae7-e9684c88e7db; https://wpscan.com/vulnerability/d0cf24be-df87-4e1f-aae7-e9684c88e7db
CVE: CVE-2022-4297
Published: 2023-01-02
Description: The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/173293/WordPress-WP-AutoComplete-Search-1.0.4-SQL-Injection.html; https://wpscan.com/vulnerability/e2dcc76c-65ac-4cd6-a5c9-6d813b5ac26d; http://packetstormsecurity.com/files/173293/WordPress-WP-AutoComplete-Search-1.0.4-SQL-Injection.html
CVE: CVE-2022-4298
Published: 2023-01-02
Description: The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/7485ad23-6ea4-4018-88b1-174312a0a478; https://wpscan.com/vulnerability/7485ad23-6ea4-4018-88b1-174312a0a478