deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2790
Published: 2022-08-19
Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE: CVE-2022-2792
Published: 2022-08-19
Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE: CVE-2022-2793
Published: 2022-08-19
Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-353, CWE-345
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE: CVE-2022-35554
Published: 2022-08-19
Description: Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://bpcbt.com; http://smartvista.com; https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/reflected-xss-in-smartvista-cardgen-version-3.28.0-cve-2022-35554
CVE: CVE-2022-35692
Published: 2022-08-19
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account detials. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-36030
Published: 2022-08-20
Description: Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvv; https://github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvv
CVE: CVE-2022-2909
Published: 2022-08-20
Description: A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206845 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://s1.ax1x.com/2022/08/14/vUSyHH.png; https://vuldb.com/?id.206845; https://s1.ax1x.com/2022/08/14/vUSyHH.png
CVE: CVE-2022-38493
Published: 2022-08-20
Description: Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryption) token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://github.com/babelouest/rhonabwy/commit/dd528b3aabd13863f855a68e76966e4e019fc399; https://github.com/babelouest/rhonabwy/commit/dd528b3aabd13863f855a68e76966e4e019fc399
CVE: CVE-2022-2921
Published: 2022-08-21
Description: Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update languages, install/activate extensions, install/activate themes and other permissive actions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-359
References: https://github.com/notrinos/notrinoserp/commit/1b9903f4deea[PII_REDACTED]e60d730c63ecbf7b45; https://huntr.dev/bounties/51b32a1c-946b-4390-a212-b6c4b6e4115c; https://github.com/notrinos/notrinoserp/commit/1b9903f4deea[PII_REDACTED]e60d730c63ecbf7b45
CVE: CVE-2022-30036
Published: 2022-08-21
Description: MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/; https://www.malighting.com/product-archive/product/grandma2-light-120112/; https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/
CVE: CVE-2022-2885
Published: 2022-08-21
Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/a9ad9ee089b575855b9e5e202b4990a15811e8d2; https://huntr.dev/bounties/edeed309-be07-4373-b15e-2d1eb415eb89; https://github.com/yetiforcecompany/yetiforcecrm/commit/a9ad9ee089b575855b9e5e202b4990a15811e8d2
CVE: CVE-2022-34916
Published: 2022-08-21
Description: Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://issues.apache.org/jira/browse/FLUME-3428; https://lists.apache.org/thread/qkmt4r2t9tbrxrdbjg1m2oczbvczd9zn; https://issues.apache.org/jira/browse/FLUME-3428
CVE: CVE-2022-36198
Published: 2022-08-22
Description: Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and buspassms/admin/edit-pass-detail.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jcarabantes/Bus-Vulnerabilities; https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql; https://github.com/jcarabantes/Bus-Vulnerabilities
CVE: CVE-2022-36251
Published: 2022-08-22
Description: Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZhenKaiHe/bug_report/blob/main/vendors/onetnom23/clinics-patient-management-system/XSS-1.md; https://github.com/ZhenKaiHe/bug_report/blob/main/vendors/onetnom23/clinics-patient-management-system/XSS-1.md
CVE: CVE-2022-2841
Published: 2022-08-22
Description: A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-206880.
CVSS Score: 2.7 (LOW)
CWE: CWE-862
References: https://vuldb.com/?ctiid.206880; https://vuldb.com/?id.206880; https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txt
CVE: CVE-2022-2927
Published: 2022-08-22
Description: Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1e; https://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886; https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1e
CVE: CVE-2022-1340
Published: 2022-08-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8; https://huntr.dev/bounties/4746f149-fc55-48a1-a7ab-fd7c7412c05a; https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8
CVE: CVE-2022-2930
Published: 2022-08-22
Description: Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
CVSS Score: 7.8 (HIGH)
CWE: CWE-620
References: https://github.com/octoprint/octoprint/commit/1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f; https://huntr.dev/bounties/da6745e4-7bcc-4e9a-9e96-0709ec9f2477; https://github.com/octoprint/octoprint/commit/1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f
CVE: CVE-2022-2890
Published: 2022-08-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8; https://huntr.dev/bounties/5d228a33-eda3-4cff-91da-7bc43e6636da; https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8
CVE: CVE-2022-2932
Published: 2022-08-22
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bustle/mobiledoc-kit/commit/f3fdaa5352904fd2a0b4247ccb0dbf68aad43b5a; https://huntr.dev/bounties/2-other-bustle/mobiledoc-kit; https://github.com/bustle/mobiledoc-kit/commit/f3fdaa5352904fd2a0b4247ccb0dbf68aad43b5a
CVE: CVE-2020-27836
Published: 2022-08-22
Description: A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restricted to specified IP ranges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732, CWE-732
References: https://access.redhat.com/security/cve/CVE-2020-27836; https://bugzilla.redhat.com/show_bug.cgi?id=1905490; https://bugzilla.redhat.com/show_bug.cgi?id=1906267
CVE: CVE-2021-24910
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b5cbebf4-5749-41a0-8be3-3333853fca17; https://wpscan.com/vulnerability/b5cbebf4-5749-41a0-8be3-3333853fca17
CVE: CVE-2021-24911
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin "Who can translate ?" setting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/bd88be21-0cfc-46bd-b78a-23efc4868a55; https://wpscan.com/vulnerability/bd88be21-0cfc-46bd-b78a-23efc4868a55
CVE: CVE-2021-24912
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/349483e2-3ab5-4573-bc03-b1ebab40584d; https://wpscan.com/vulnerability/349483e2-3ab5-4573-bc03-b1ebab40584d
CVE: CVE-2021-36847
Published: 2022-08-22
Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/webba-booking-lite/wordpress-webba-booking-plugin-4-2-21-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/webba-booking-lite/#developers; https://patchstack.com/database/vulnerability/webba-booking-lite/wordpress-webba-booking-plugin-4-2-21-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-36852
Published: 2022-08-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/wp-hotel-booking/#developers; https://patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2021-36857
Published: 2022-08-22
Description: Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/testimonial-builder/wordpress-testimonial-builder-plugin-1-6-1-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/testimonial-builder/#developers; https://patchstack.com/database/vulnerability/testimonial-builder/wordpress-testimonial-builder-plugin-1-6-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-37289
Published: 2022-08-22
Description: Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp.
CVSS Score: 7.2 (HIGH)
CWE: CWE-276
References: http://www.planex.co.jp/products/mzk-dp150n/; https://jvn.jp/en/vu/JVNVU98291763/; https://samy.link/blog/a-hidden-web-shell-in-the-plug-in-wireless-planex-mzk-dp150n
CVE: CVE-2021-3442
Published: 2022-08-22
Description: A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://access.redhat.com/security/cve/CVE-2021-3442; https://bugzilla.redhat.com/show_bug.cgi?id=1930083; https://access.redhat.com/security/cve/CVE-2021-3442
CVE: CVE-2021-3481
Published: 2022-08-22
Description: A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2021-3481; https://bugreports.qt.io/browse/QTBUG-91507; https://bugzilla.redhat.com/show_bug.cgi?id=1931444
CVE: CVE-2021-3513
Published: 2022-08-22
Description: A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-209
References: https://access.redhat.com/security/cve/CVE-2021-3513; https://bugzilla.redhat.com/show_bug.cgi?id=1953439; https://access.redhat.com/security/cve/CVE-2021-3513
CVE: CVE-2021-3521
Published: 2022-08-22
Description: There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://access.redhat.com/security/cve/CVE-2021-3521; https://bugzilla.redhat.com/show_bug.cgi?id=1941098; https://github.com/rpm-software-management/rpm/commit/bd36c5dc9fb6d90c46fbfed8c2d67516fc571ec8
CVE: CVE-2021-3586
Published: 2022-08-22
Description: A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188, CWE-1188
References: https://access.redhat.com/security/cve/CVE-2021-3586; https://bugzilla.redhat.com/show_bug.cgi?id=1967738; https://access.redhat.com/security/cve/CVE-2021-3586
CVE: CVE-2021-3590
Published: 2022-08-22
Description: A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200, CWE-319
References: https://access.redhat.com/security/cve/CVE-2021-3590; https://bugzilla.redhat.com/show_bug.cgi?id=1969258; https://access.redhat.com/security/cve/CVE-2021-3590
CVE: CVE-2021-3639
Published: 2022-08-22
Description: A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://access.redhat.com/security/cve/CVE-2021-3639; https://bugzilla.redhat.com/show_bug.cgi?id=1980648; https://github.com/latchset/mod_auth_mellon/commit/42a11261b9dad2e48d70bdff7c53dd57a12db6f5
CVE: CVE-2021-3659
Published: 2022-08-22
Description: A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252, CWE-476
References: https://access.redhat.com/security/cve/CVE-2021-3659; https://bugzilla.redhat.com/show_bug.cgi?id=1975949; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8
CVE: CVE-2022-0446
Published: 2022-08-22
Description: The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3fc7986e-3b38-4e16-9516-2ae00bc7a581; https://wpscan.com/vulnerability/3fc7986e-3b38-4e16-9516-2ae00bc7a581
CVE: CVE-2022-1251
Published: 2022-08-22
Description: The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349; https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349
CVE: CVE-2022-1322
Published: 2022-08-22
Description: The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e1724471-26bd-4cb3-a[PII_REDACTED]2ed0c; https://wpscan.com/vulnerability/e1724471-26bd-4cb3-a[PII_REDACTED]2ed0c
CVE: CVE-2022-1932
Published: 2022-08-22
Description: The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/005c2300-f6bd-416e-97a6-d42284bbb093; https://wpscan.com/vulnerability/005c2300-f6bd-416e-97a6-d42284bbb093
CVE: CVE-2022-25810
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin/admin.php?page=tp_utils), which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable this way, which involves resetting configurations and backup/restore operations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/9a934a84-f0c7-42ed-b980-bb168b2c5892; https://wpscan.com/vulnerability/9a934a84-f0c7-42ed-b980-bb168b2c5892
CVE: CVE-2022-25811
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/0e0d2c5f-3396-4a0a-a5c6-6a98de3802c9; https://wpscan.com/vulnerability/0e0d2c5f-3396-4a0a-a5c6-6a98de3802c9
CVE: CVE-2022-25812
Published: 2022-08-22
Description: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://wpscan.com/vulnerability/1f6bd346-4743-44b8-86d7-4fbe09bad657; https://wpscan.com/vulnerability/1f6bd346-4743-44b8-86d7-4fbe09bad657
CVE: CVE-2022-2172
Published: 2022-08-22
Description: The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?new=2754739%40linkworth-wp-plugin&old=2750802%40linkworth-wp-plugin#file8; https://wpscan.com/vulnerability/bfb6ed12-ae64-4075-9d0b-5620e998df74; https://plugins.trac.wordpress.org/changeset?new=2754739%40linkworth-wp-plugin&old=2750802%40linkworth-wp-plugin#file8