deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-34056
Published: 2022-06-24
Description: The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/TimHessels/watertools/issues/1; https://pypi.org/project/watertools/
CVE: CVE-2022-34057
Published: 2022-06-24
Description: The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://pypi.org/project/scoptrial/; http://pypi.doubanio.com/simple/request
CVE: CVE-2022-34059
Published: 2022-06-24
Description: The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/sixfab/setup-and-diagnostic-tool/issues/7; https://pypi.org/project/sixfab-tool/
CVE: CVE-2022-34060
Published: 2022-06-24
Description: The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/togglee/togglee-python/issues/2; https://pypi.org/project/togglee/
CVE: CVE-2022-34061
Published: 2022-06-24
Description: The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/CatNeverCodes/catly_translate/issues/1; https://pypi.org/project/catly-translate/
CVE: CVE-2022-34064
Published: 2022-06-24
Description: The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://pypi.org/project/zibal/; http://pypi.doubanio.com/simple/request
CVE: CVE-2022-34065
Published: 2022-06-24
Description: The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/rondolu/project-yt-concate/issues/1; https://pypi.org/project/rondolu-yt-concate/
CVE: CVE-2022-34066
Published: 2022-06-24
Description: The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/rasmushaugaard/texercise-cli/issues/1; https://pypi.org/project/texercise/
CVE: CVE-2021-40894
Published: 2022-06-24
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/underscore-99xp.mjs; https://github.com/yetingli/SaveResults/blob/main/js/underscore-99xp.mjs
CVE: CVE-2022-33128
Published: 2022-06-25
Description: RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /alarm_pi/alarmService.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://blog.mo60.cn/index.php/archives/ruijie.html; http://blog.mo60.cn/index.php/archives/ruijie.html
CVE: CVE-2019-25071
Published: 2022-06-25
Description: A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been disclosed to the public. The existence and implications of this vulnerability are doubted by Apple even though multiple public videos demonstrating the attack exist. Upgrading to version 13.0 migt be able to address this issue. It is recommended to upgrade affected devices. NOTE: Apple claims, that after examining the report they do not see any actual security implications.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269
References: https://vuldb.com/?id.143125; https://www.scip.ch/en/?labs.20191010; https://youtu.be/AeuGjMbAirU
CVE: CVE-2022-24893
Published: 2022-06-25
Description: ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Start PDU. This can result in memory corruption related attacks and potentially attacker gaining control of the entire system. Patch commits are available on the 4.1, 4.2, 4.3 and 4.4 branches and users are recommended to upgrade. The upgrade is applicable for all applications and users of `ESP-BLE-MESH` component from `ESP-IDF`. As it is implemented in the Bluetooth Mesh stack, there is no workaround for the user to fix the application layer without upgrading the underlying firmware.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-788, CWE-787
References: https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm; https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm
CVE: CVE-2022-29168
Published: 2022-06-25
Description: Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim allowing the attacker to fully control the user account. Wire-desktop clients that are connected to a vulnerable wire-webapp version are also vulnerable to this attack. The issue has been fixed in wire-webapp 2022-05-04-production.0 and is already deployed on all Wire managed services. On-premise instances of wire-webapp need to be updated to docker tag 2022-05-04-production.0-v0.29.7-0-a6f2ded or wire-server 2022-05-04 (chart/4.11.0) or later. No known workarounds exist.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/wireapp/wire-webapp/security/advisories/GHSA-jgv3-4j56-fvh6; https://github.com/wireapp/wire-webapp/security/advisories/GHSA-jgv3-4j56-fvh6
CVE: CVE-2022-31016
Published: 2022-06-25
Description: Argo CD is a declarative continuous deployment for Kubernetes. Argo CD versions v0.7.0 and later are vulnerable to an uncontrolled memory consumption bug, allowing an authorized malicious user to crash the repo-server service, resulting in a Denial of Service. The attacker must be an authenticated Argo CD user authorized to deploy Applications from a repository which contains (or can be made to contain) a large file. The fix for this vulnerability is available in versions 2.3.5, 2.2.10, 2.1.16, and later. There are no known workarounds. Users are recommended to upgrade.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/argoproj/argo-cd/security/advisories/GHSA-jhqp-vf4w-rpwq; https://github.com/argoproj/argo-cd/security/advisories/GHSA-jhqp-vf4w-rpwq
CVE: CVE-2022-31017
Published: 2022-06-25
Description: Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with protected history, where new subscribers should not be allowed to see messages sent before they were subscribed, when edited causes the server to incorrectly send an API event that includes the edited message to all of the stream’s current subscribers. This API event is ignored by official clients, but can be observed by using a modified client or the browser’s developer tools. This bug will be fixed in Zulip Server 5.3. There are no known workarounds.
CVSS Score: 2.0 (LOW)
CWE: CWE-571, CWE-670
References: https://github.com/zulip/zulip/security/advisories/GHSA-m5j3-jp59-6f3q; https://github.com/zulip/zulip/security/advisories/GHSA-m5j3-jp59-6f3q
CVE: CVE-2022-29931
Published: 2022-06-25
Description: The administration interface of the Raytion Custom Security Manager (Raytion CSM) in Version 7.2.0 allows reflected Cross-site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-29931; https://excellium-services.com/cert-xlm-advisory/CVE-2022-29931; https://excellium-services.com/cert-xlm-advisory/CVE-2022-29931
CVE: CVE-2022-34491
Published: 2022-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-29969. Reason: This candidate is a duplicate of CVE-2022-29969. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2022-29969 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-27509
Published: 2022-06-26
Description: Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs into their mailbox.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://galaxkey.com; https://medium.com/%40tomhulme_74888/persistent-cross-site-scripting-leading-to-full-account-takeover-on-galaxkey-v5-6-11-4-8bf96be35b54; http://galaxkey.com
CVE: CVE-2022-34494
Published: 2022-06-26
Description: rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4; https://github.com/torvalds/linux/commit/1680939e9ecf7764fba8689cfb3429c2fe2bb23c; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
CVE: CVE-2022-34495
Published: 2022-06-26
Description: rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4; https://github.com/torvalds/linux/commit/c2eecefec5df1306eafce28ccdf1ca159a552ecc; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
CVE: CVE-2022-2206
Published: 2022-06-26
Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/vim/vim/commit/e178af5a586ea023622d460779fdcabbbfac0908; https://huntr.dev/bounties/01d01e74-55d0-4d9e-878e-79ba599be668; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2022-30932
Published: 2022-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-33146
Published: 2022-06-27
Description: Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://web2py.com/; https://github.com/web2py/web2py/commit/a181b855a43cb8b479d276b082cfcde385768451; https://github.com/web2py/web2py/commit/d9805606f88f00c0be[PII_REDACTED]5cefde73e14e#diff-c1d01f37ee54d[PII_REDACTED]60b9c4d7b274e2be7ad18f65552cd564336ab593bR110
CVE: CVE-2022-33202
Published: 2022-06-27
Description: Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative paths or channels for Sensor.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://jvn.jp/en/jp/JVN51464799/index.html; https://www.softcreate.co.jp/news/detail/210; https://jvn.jp/en/jp/JVN51464799/index.html
CVE: CVE-2020-9754
Published: 2022-06-27
Description: NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://cve.naver.com/detail/cve-2020-9754.html; https://cve.naver.com/detail/cve-2020-9754.html
CVE: CVE-2022-2212
Published: 2022-06-27
Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md; https://vuldb.com/?id.202758; https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md
CVE: CVE-2022-2213
Published: 2022-06-27
Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_admin_details.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Cross%20Site%20Scripting%28Stored%29/POC.md; https://vuldb.com/?id.202759; https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Cross%20Site%20Scripting%28Stored%29/POC.md
CVE: CVE-2022-2214
Published: 2022-06-27
Description: A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Sql%20Injection/POC.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-2.md; https://vuldb.com/?id.202760
CVE: CVE-2022-0444
Published: 2022-06-27
Description: The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b; https://wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b
CVE: CVE-2022-0875
Published: 2022-06-27
Description: The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/fefc1411-594d-465b-aeb9-78c141b23762; https://wpscan.com/vulnerability/fefc1411-594d-465b-aeb9-78c141b23762
CVE: CVE-2022-1010
Published: 2022-06-27
Description: The Login using WordPress Users ( WP as SAML IDP ) WordPress plugin before 1.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e9e4dfbe-01b2-4003-80ed-db1e45f38b2b; https://wpscan.com/vulnerability/e9e4dfbe-01b2-4003-80ed-db1e45f38b2b
CVE: CVE-2022-1028
Published: 2022-06-27
Description: The WordPress Security Firewall, Malware Scanner, Secure Login and Backup plugin before 4.2.1 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/16fc08ec-8476-4f3c-93ea-6a51ed880dd5; https://wpscan.com/vulnerability/16fc08ec-8476-4f3c-93ea-6a51ed880dd5
CVE: CVE-2022-1029
Published: 2022-06-27
Description: The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0e74eeb4-89e2-4873-904f-ad4f25c4a8ba; https://wpscan.com/vulnerability/0e74eeb4-89e2-4873-904f-ad4f25c4a8ba
CVE: CVE-2022-1095
Published: 2022-06-27
Description: The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/bf476a3e-05ba-4b54-8a65-3d261ad5337b; https://wpscan.com/vulnerability/bf476a3e-05ba-4b54-8a65-3d261ad5337b
CVE: CVE-2022-1113
Published: 2022-06-27
Description: The Flower Delivery by Florist One WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setups)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/ea438e84-f842-4cb9-b6c0-550cd8187701; https://wpscan.com/vulnerability/ea438e84-f842-4cb9-b6c0-550cd8187701
CVE: CVE-2022-1321
Published: 2022-06-27
Description: The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b8784995-0deb-4c83-959f-52b37881e05c; https://wpscan.com/vulnerability/b8784995-0deb-4c83-959f-52b37881e05c
CVE: CVE-2022-1326
Published: 2022-06-27
Description: The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f57615d9-a567-4c2a-9f06-2c6b61f56074; https://wpscan.com/vulnerability/f57615d9-a567-4c2a-9f06-2c6b61f56074
CVE: CVE-2022-1327
Published: 2022-06-27
Description: The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6b71eb38-0a4a-49d1-96bc-84bbe675be1e; https://wpscan.com/vulnerability/6b71eb38-0a4a-49d1-96bc-84bbe675be1e
CVE: CVE-2022-1470
Published: 2022-06-27
Description: The Ultimate WooCommerce CSV Importer WordPress plugin through 2.0 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/13bb796f-7a17-47c9-a46f-a1d6ca4b6b91; https://wpscan.com/vulnerability/13bb796f-7a17-47c9-a46f-a1d6ca4b6b91
CVE: CVE-2022-1572
Published: 2022-06-27
Description: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/9afd1805-d449-4551-986a-f92cb47c95c5; https://wpscan.com/vulnerability/9afd1805-d449-4551-986a-f92cb47c95c5
CVE: CVE-2022-1573
Published: 2022-06-27
Description: The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/9c1acd9c-999f-4a35-a272-1ad31552e685; https://wpscan.com/vulnerability/9c1acd9c-999f-4a35-a272-1ad31552e685
CVE: CVE-2022-1574
Published: 2022-06-27
Description: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result, unauthenticated attackers can upload arbitrary files (such as PHP) on the remote server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/c36d0ea8-bf5c-4af9-bd3d-911eb02adc14; https://wpscan.com/vulnerability/c36d0ea8-bf5c-4af9-bd3d-911eb02adc14
CVE: CVE-2022-1593
Published: 2022-06-27
Description: The Site Offline or Coming Soon WordPress plugin through 1.6.6 does not have CSRF check in place when updating its settings, and it also lacking sanitisation as well as escaping in some of them. As a result, attackers could make a logged in admin change them and put Cross-Site Scripting payloads in them via a CSRF attack
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/67678666-402b-4010-ac56-7067a0f40185; https://wpscan.com/vulnerability/67678666-402b-4010-ac56-7067a0f40185
CVE: CVE-2022-1625
Published: 2022-06-27
Description: The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes (for bypassing the provided restrictions) and to change plugin settings by tricking admin users into visiting specially crafted websites.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/e1693318-900c-47f1-bb77-008b0d33327f; https://wpscan.com/vulnerability/e1693318-900c-47f1-bb77-008b0d33327f