deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2022
Published: 2022-06-07
Description: Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nocodb/nocodb/commit/ffad5a318ad60d1da1c75dd28152827b94c92e9d; https://huntr.dev/bounties/f6082949-40d3-411c-b613-23ada2691913; https://github.com/nocodb/nocodb/commit/ffad5a318ad60d1da1c75dd28152827b94c92e9d
CVE: CVE-2021-35530
Published: 2022-06-07
Description: A vulnerability in the application authentication and authorization mechanism in Hitachi Energy's TXpert Hub CoreTec 4, that depends on a token validation of the session identifier, allows an unauthorized modified message to be executed in the server enabling an unauthorized actor to change an existing user password, and further gain authorized access into the system via login mechanism. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0 2.1.0; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-288
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua
CVE: CVE-2021-35531
Published: 2022-06-07
Description: Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-78
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua
CVE: CVE-2021-35532
Published: 2022-06-07
Description: A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficient privilege to upload a malicious firmware to the product. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-494, CWE-434
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua
CVE: CVE-2022-29620
Published: 2022-06-07
Description: FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643; https://youtu.be/ErZl1i7McHk; https://youtu.be/eSlfQQytIq0
CVE: CVE-2022-30466
Published: 2022-06-07
Description: joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-294
References: https://github.com/nsbogam/ebike; https://github.com/nsbogam/ebike
CVE: CVE-2022-31470
Published: 2022-06-07
Description: An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/174551/Axigen-10.5.0-4370c946-Cross-Site-Scripting.html; https://axigen.com; https://www.axigen.com/knowledgebase/Axigen-Mobile-WebMail-XSS-Vulnerability-CVE-2022-31470-_390.html
CVE: CVE-2022-24065
Published: 2022-06-08
Description: The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://github.com/cookiecutter/cookiecutter/commit/fdffddb31fd2b46344dfa317531ff155e7999f77; https://github.com/cookiecutter/cookiecutter/releases/tag/2.1.1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G5TXC4JYTNGOUFMCXPZ6QKWEZN3URTAK/
CVE: CVE-2019-25062
Published: 2022-06-08
Description: A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://vuldb.com/?id.159431; https://www.exploit-db.com/exploits/47477; https://vuldb.com/?id.159431
CVE: CVE-2019-25063
Published: 2022-06-08
Description: A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is required to approach this attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://vuldb.com/?id.159432; https://vuldb.com/?id.159432
CVE: CVE-2020-36543
Published: 2022-06-08
Description: A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://sialweb.net/; https://vuldb.com/?id.159429; https://sialweb.net/
CVE: CVE-2020-36544
Published: 2022-06-08
Description: A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: https://sialweb.net/; https://vuldb.com/?id.159430; https://sialweb.net/
CVE: CVE-2022-1703
Published: 2022-06-08
Description: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010
CVE: CVE-2022-21122
Published: 2022-06-08
Description: The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-94
References: https://github.com/metarhia/metacalc/commit/625c23d63eabfa16fc815f5832b147b08d2144bd; https://github.com/metarhia/metacalc/pull/16; https://snyk.io/vuln/SNYK-JS-METACALC-2826197
CVE: CVE-2017-20017
Published: 2022-06-08
Description: A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.105833; https://vuldb.com/?id.105833
CVE: CVE-2022-0779
Published: 2022-06-08
Description: The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/9d4a3f09-b011-4d87-ab63-332e505cf1cd; https://wpscan.com/vulnerability/9d4a3f09-b011-4d87-ab63-332e505cf1cd
CVE: CVE-2022-0788
Published: 2022-06-08
Description: The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/fbc71710-123f-4c61-9796-a6a4fd354828; https://wpscan.com/vulnerability/fbc71710-123f-4c61-9796-a6a4fd354828
CVE: CVE-2022-1005
Published: 2022-06-08
Description: The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f37d1d55-10cc-4202-8d16-9ec2128f54f9; https://wpscan.com/vulnerability/f37d1d55-10cc-4202-8d16-9ec2128f54f9
CVE: CVE-2022-1241
Published: 2022-06-08
Description: The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3258393a-eafb-4356-994e-2ff8ce223c9b; https://wpscan.com/vulnerability/3258393a-eafb-4356-994e-2ff8ce223c9b
CVE: CVE-2022-1394
Published: 2022-06-08
Description: The Photo Gallery by 10Web WordPress plugin before 1.6.4 does not properly validate and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f7a0df37-3204-4926-84ec-2204a2f22de3; https://wpscan.com/vulnerability/f7a0df37-3204-4926-84ec-2204a2f22de3
CVE: CVE-2022-1421
Published: 2022-06-08
Description: The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/a7a24e8e-9056-4967-bcad-b96cc0c5b249; https://wpscan.com/vulnerability/a7a24e8e-9056-4967-bcad-b96cc0c5b249
CVE: CVE-2022-1422
Published: 2022-06-08
Description: The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/29aff4bf-1691-4dc1-a670-1f2c9a765a3b; https://wpscan.com/vulnerability/29aff4bf-1691-4dc1-a670-1f2c9a765a3b
CVE: CVE-2022-1424
Published: 2022-06-08
Description: The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/147b4097-dec8-4542-b122-7b237db81c05; https://wpscan.com/vulnerability/147b4097-dec8-4542-b122-7b237db81c05
CVE: CVE-2022-1469
Published: 2022-06-08
Description: The FiboSearch WordPress plugin before 1.17.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/88869380-173d-4d4f-81d8-3c20add5f98d; https://wpscan.com/vulnerability/88869380-173d-4d4f-81d8-3c20add5f98d
CVE: CVE-2022-1506
Published: 2022-06-08
Description: The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ee4f6786-27e4-474c-85e0-715b0c0f2776; https://wpscan.com/vulnerability/ee4f6786-27e4-474c-85e0-715b0c0f2776
CVE: CVE-2022-1541
Published: 2022-06-08
Description: The Video Slider WordPress plugin before 1.4.8 does not sanitize or escape some of its video settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/053a9815-cf0a-472e-844a-3dea407ce022; https://wpscan.com/vulnerability/053a9815-cf0a-472e-844a-3dea407ce022
CVE: CVE-2022-1569
Published: 2022-06-08
Description: The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! WordPress plugin before 1.4.9.4 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/5a2756c1-9abf-4fd6-8ce2-9f840514dfcc; https://wpscan.com/vulnerability/5a2756c1-9abf-4fd6-8ce2-9f840514dfcc
CVE: CVE-2022-1570
Published: 2022-06-08
Description: The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/c0257564-48ee-4d02-865f-82c8b5e793c9; https://wpscan.com/vulnerability/c0257564-48ee-4d02-865f-82c8b5e793c9
CVE: CVE-2022-1577
Published: 2022-06-08
Description: The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. Or disable the automatic backup schedule
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/39388900-266d-4308-88e7-d40ca6bbe346; https://wpscan.com/vulnerability/39388900-266d-4308-88e7-d40ca6bbe346
CVE: CVE-2022-1597
Published: 2022-06-08
Description: The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/faff9484-9fc7-4300-bdad-9cd8a30a9a4e; https://wpscan.com/vulnerability/faff9484-9fc7-4300-bdad-9cd8a30a9a4e
CVE: CVE-2022-1598
Published: 2022-06-08
Description: The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8; https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8
CVE: CVE-2022-1647
Published: 2022-06-08
Description: The FormCraft WordPress plugin before 1.2.6 does not sanitise and escape Field Labels, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8e8f6b08-90ab-466a-9828-dca0c0da2c9c; https://wpscan.com/vulnerability/8e8f6b08-90ab-466a-9828-dca0c0da2c9c
CVE: CVE-2022-1673
Published: 2022-06-08
Description: The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the error_envision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/14283389-a6b8-4dd8-9441-f16fcc4ab3c0; https://wpscan.com/vulnerability/14283389-a6b8-4dd8-9441-f16fcc4ab3c0
CVE: CVE-2022-1683
Published: 2022-06-08
Description: The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and not just Author+ like the original advisory mention) due to the fact that they can execute shortcodes via an AJAX action
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://bulletin.iese.de/post/amtythumb_4-2-0; https://wpscan.com/vulnerability/359d145b-c365-4e7c-a12e-c26b7b8617ce; https://bulletin.iese.de/post/amtythumb_4-2-0
CVE: CVE-2022-1684
Published: 2022-06-08
Description: The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/cube-slider_1-2; https://wpscan.com/vulnerability/db7fb815-945a-41c7-8932-834cc646a806; https://bulletin.iese.de/post/cube-slider_1-2
CVE: CVE-2022-1685
Published: 2022-06-08
Description: The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://bulletin.iese.de/post/five-minute-webshop_1-3-2_1; https://wpscan.com/vulnerability/86bd28d5-6767-4bca-ab59-710c1c4ecd97; https://bulletin.iese.de/post/five-minute-webshop_1-3-2_1
CVE: CVE-2022-1686
Published: 2022-06-08
Description: The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/five-minute-webshop_1-3-2_2; https://wpscan.com/vulnerability/1a5ce0dd-6847-42e7-8d88-3b63053fab71; https://bulletin.iese.de/post/five-minute-webshop_1-3-2_2
CVE: CVE-2022-1687
Published: 2022-06-08
Description: The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/logo-slider_1-4-8; https://wpscan.com/vulnerability/e7506906-5c3d-4963-ae24-55f18c3e5081; https://bulletin.iese.de/post/logo-slider_1-4-8
CVE: CVE-2022-1688
Published: 2022-06-08
Description: The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/note-press_0-1-10_1; https://wpscan.com/vulnerability/63d4444b-9b04-47f5-a692-c6c6c8ea7d92; https://bulletin.iese.de/post/note-press_0-1-10_1
CVE: CVE-2022-1689
Published: 2022-06-08
Description: The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/note-press_0-1-10_2; https://wpscan.com/vulnerability/982f84a1-216d-41ed-87bd-433b695cec28; https://bulletin.iese.de/post/note-press_0-1-10_2
CVE: CVE-2022-1690
Published: 2022-06-08
Description: The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://bulletin.iese.de/post/note-press_0-1-10_3; https://wpscan.com/vulnerability/54e16f0a-667c-44ea-98ad-0306c4a35d9d; https://bulletin.iese.de/post/note-press_0-1-10_3
CVE: CVE-2022-1691
Published: 2022-06-08
Description: The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://bulletin.iese.de/post/realty-workstation_1-0-6; https://wpscan.com/vulnerability/f9363b4c-c434-4f15-93f8-46162d2d7049; https://bulletin.iese.de/post/realty-workstation_1-0-6
CVE: CVE-2022-1692
Published: 2022-06-08
Description: The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://bulletin.iese.de/post/cp-image-store_1-0-67; https://wpscan.com/vulnerability/83bae80c-f583-4d89-8282-e6384bbc7571; https://bulletin.iese.de/post/cp-image-store_1-0-67
CVE: CVE-2022-1695
Published: 2022-06-08
Description: The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/2ac5b87b-1390-41ce-af6e-c50e5709baaa; https://wpscan.com/vulnerability/2ac5b87b-1390-41ce-af6e-c50e5709baaa
CVE: CVE-2022-1709
Published: 2022-06-08
Description: The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ac290535-d9ec-459a-abc3-27cd78eb54fc; https://wpscan.com/vulnerability/ac290535-d9ec-459a-abc3-27cd78eb54fc
CVE: CVE-2022-1712
Published: 2022-06-08
Description: The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515; https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515