deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31564
Published: 2022-07-11
Description: The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/woduq1414/munhak-moa/commit/e8f800373b20cb22de70c7a994325b8903877da0; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31565
Published: 2022-07-11
Description: The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31566
Published: 2022-07-11
Description: The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31567
Published: 2022-07-11
Description: The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31568
Published: 2022-07-11
Description: The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31569
Published: 2022-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that no specific affected product had been identified. Notes: none
CVE: CVE-2022-31570
Published: 2022-07-11
Description: The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31571
Published: 2022-07-11
Description: The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31572
Published: 2022-07-11
Description: The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31573
Published: 2022-07-11
Description: The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31574
Published: 2022-07-11
Description: The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31575
Published: 2022-07-11
Description: The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31576
Published: 2022-07-11
Description: The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31577
Published: 2022-07-11
Description: The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31578
Published: 2022-07-11
Description: The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31579
Published: 2022-07-11
Description: The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31580
Published: 2022-07-11
Description: The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31581
Published: 2022-07-11
Description: The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/scorelab/OpenMF/issues/262; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31582
Published: 2022-07-11
Description: The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31583
Published: 2022-07-11
Description: The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31584
Published: 2022-07-11
Description: The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31585
Published: 2022-07-11
Description: The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31586
Published: 2022-07-11
Description: The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31587
Published: 2022-07-11
Description: The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31588
Published: 2022-07-11
Description: The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-35414
Published: 2022-07-11
Description: softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://github.com/qemu/qemu/blob/f200ff158d5abcb974a6b597a962b6b2fbea2b06/softmmu/physmem.c; https://github.com/qemu/qemu/blob/v7.0.0/include/exec/cpu-all.h#L145-L148; https://github.com/qemu/qemu/commit/3517fb726741c109cae7995f9ea46f0cab6187d6#diff-83c563ed6330dc5d49876f1116e7518b5c16654bbc6e9b4ea8e28f5833d576fcR482
CVE: CVE-2022-32294
Published: 2022-07-11
Description: Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command). It is visible in cleartext on port UDP 514 (aka the syslog port). NOTE: a third party reports that this cannot be reproduced.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/soheilsamanabadi/vulnerabilitys/blob/main/Zimbra%208.8.15%20zmprove%20ca%20command; https://github.com/soheilsamanabadi/vulnerabilitys/pull/1; https://medium.com/%40soheil.samanabadi/zimbra-8-8-15-zmprove-ca-command-incorrect-access-control[PII_REDACTED]e
CVE: CVE-2022-35416
Published: 2022-07-11
Description: H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Docker-droid/H3C_SSL_VPN_XSS; https://github.com/Docker-droid/H3C_SSL_VPN_XSS
CVE: CVE-2022-2368
Published: 2022-07-11
Description: Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://github.com/microweber/microweber/commit/53c000ccd5602536e28b15d9630eb8261b04a302; https://huntr.dev/bounties/a9595eda-a5e0-4717-8d64-b445ef83f452; https://github.com/microweber/microweber/commit/53c000ccd5602536e28b15d9630eb8261b04a302
CVE: CVE-2022-29926
Published: 2022-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation in Cybozu, Inc. showed that it was not a vulnerability. Notes: https://jvn.jp/en/jp/JVN14077132
CVE: CVE-2022-1794
Published: 2022-07-11
Description: The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17129&token=1c1485c4a700c04f2069699f5be7558d276ca117&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17129&token=1c1485c4a700c04f2069699f5be7558d276ca117&download=
CVE: CVE-2022-2302
Published: 2022-07-11
Description: Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-304, CWE-287
References: https://cert.vde.com/en/advisories/VDE-2022-030/; https://cert.vde.com/en/advisories/VDE-2022-030/
CVE: CVE-2022-30791
Published: 2022-07-11
Description: In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=
CVE: CVE-2022-30792
Published: 2022-07-11
Description: In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=
CVE: CVE-2022-1057
Published: 2022-07-11
Description: The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/7c33ffc3-84d1-4a0f-a837-794cdc3ad243; https://wpscan.com/vulnerability/7c33ffc3-84d1-4a0f-a837-794cdc3ad243
CVE: CVE-2022-1220
Published: 2022-07-11
Description: The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/eb58f43e-4304-40e7-9e0f-d0d6fe049724; https://wpscan.com/vulnerability/eb58f43e-4304-40e7-9e0f-d0d6fe049724
CVE: CVE-2022-1474
Published: 2022-07-11
Description: The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2d821464-c502-4f71-afee-97b3dea16612; https://wpscan.com/vulnerability/2d821464-c502-4f71-afee-97b3dea16612
CVE: CVE-2022-1546
Published: 2022-07-11
Description: The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5ec6182c-6917-4c48-90ce-e0ebe38e7595; https://wpscan.com/vulnerability/5ec6182c-6917-4c48-90ce-e0ebe38e7595
CVE: CVE-2022-1576
Published: 2022-07-11
Description: The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/68deab46-1c16-46ae-a912-a104958ca4cf; https://wpscan.com/vulnerability/68deab46-1c16-46ae-a912-a104958ca4cf
CVE: CVE-2022-1599
Published: 2022-07-11
Description: The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status (draft, published), slug, post date, comment status (enabled, disabled) and more.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/4a36e876-7e3b-4a81-9f16-9ff5fbb20dd6; https://wpscan.com/vulnerability/4a36e876-7e3b-4a81-9f16-9ff5fbb20dd6
CVE: CVE-2022-1626
Published: 2022-07-11
Description: The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of them
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/3d1f90d9-45da-42f8-93f8-15c8a4ff90ca; https://wpscan.com/vulnerability/3d1f90d9-45da-42f8-93f8-15c8a4ff90ca
CVE: CVE-2022-1732
Published: 2022-07-11
Description: The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/3620a087-032e-4a5f-99c8-f9e7e9c29813; https://wpscan.com/vulnerability/3620a087-032e-4a5f-99c8-f9e7e9c29813
CVE: CVE-2022-1757
Published: 2022-07-11
Description: The pagebar WordPress plugin before 2.70 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation in some of them, it could also lead to Stored XSS issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/e648633e-868b-45b2-870a-308a2f9cb7f5; https://wpscan.com/vulnerability/e648633e-868b-45b2-870a-308a2f9cb7f5
CVE: CVE-2022-1894
Published: 2022-07-11
Description: The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/68af14ef-ca66-40d6-a1e5-09f74e2cd971; https://wpscan.com/vulnerability/68af14ef-ca66-40d6-a1e5-09f74e2cd971
CVE: CVE-2022-1910
Published: 2022-07-11
Description: The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8afe1638-66fa-44c7-9d02-c81573193b47; https://wpscan.com/vulnerability/8afe1638-66fa-44c7-9d02-c81573193b47
CVE: CVE-2022-1937
Published: 2022-07-11
Description: The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/eb40ea5d-a463-4947-9a40-d55911ff50e9; https://wpscan.com/vulnerability/eb40ea5d-a463-4947-9a40-d55911ff50e9
CVE: CVE-2022-1938
Published: 2022-07-11
Description: The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate analytics data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against a logged in admin viewing the plugin's settings
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/70aed824-c53e-4672-84c9-039dc34ed5fa; https://wpscan.com/vulnerability/70aed824-c53e-4672-84c9-039dc34ed5fa
CVE: CVE-2022-1951
Published: 2022-07-11
Description: The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated users when a premium theme from the vendor is active, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f56f7244-e8ec-4a87-9419-643bc13b45a0; https://wpscan.com/vulnerability/f56f7244-e8ec-4a87-9419-643bc13b45a0
CVE: CVE-2022-1952
Published: 2022-07-11
Description: The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/ecf61d17-8b07-4cb6-93a8-64c2c4fbbe04; https://wpscan.com/vulnerability/ecf61d17-8b07-4cb6-93a8-64c2c4fbbe04
CVE: CVE-2022-1956
Published: 2022-07-11
Description: The Shortcut Macros WordPress plugin through 1.3 does not have authorisation and CSRF checks in place when updating its settings, which could allow any authenticated users, such as subscriber, to update them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ef6d0393-0ce3-465c-84c8-53bf8c58958a; https://wpscan.com/vulnerability/ef6d0393-0ce3-465c-84c8-53bf8c58958a
CVE: CVE-2022-1957
Published: 2022-07-11
Description: The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ad3f6f3d-e12c-4867-906c-73aa001c7351; https://wpscan.com/vulnerability/ad3f6f3d-e12c-4867-906c-73aa001c7351
CVE: CVE-2022-2050
Published: 2022-07-11
Description: The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/016453e3-803b-4a67-8ea7-2d228c2998d4; https://wpscan.com/vulnerability/016453e3-803b-4a67-8ea7-2d228c2998d4
CVE: CVE-2022-2089
Published: 2022-07-11
Description: The Bold Page Builder WordPress plugin before 4.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9fe7e9d5-7bdf-4ade-9a3c-b4af863fa4e8; https://wpscan.com/vulnerability/9fe7e9d5-7bdf-4ade-9a3c-b4af863fa4e8