deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-27756
Published: 2022-03-04
Description: "TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0096977; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0096977
CVE: CVE-2021-32008
Published: 2022-03-04
Description: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22, CWE-552, CWE-22
References: https://www.secomea.com/support/cybersecurity-advisory; https://www.secomea.com/support/cybersecurity-advisory
CVE: CVE-2021-40846
Published: 2022-03-04
Description: An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and request, updates. Thus, attackers can man-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://axelp.io/YWDAC; https://www.tradingpaints.com/page/Privacy; https://axelp.io/YWDAC
CVE: CVE-2021-44827
Published: 2022-03-04
Description: There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://Full-Disclosure.eu; https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html; https://www.tp-link.com/us/security
CVE: CVE-2021-46353
Published: 2022-03-04
Description: An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283; https://www.dlink.com/en/security-bulletin/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE: CVE-2021-46384
Published: 2022-03-04
Description: https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://gitee.com/mingSoft/MCMS/issues/I4QZ1O; https://gitee.com/mingSoft/MCMS/issues/I4QZ1O
CVE: CVE-2022-25312
Published: 2022-03-05
Description: An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions < 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2022/03/04/2; https://lists.apache.org/thread/y6cm5n3ksohsrhzqknqhzy7p3mtkyk23; http://www.openwall.com/lists/oss-security/2022/03/04/2
CVE: CVE-2022-25069
Published: 2022-03-05
Description: Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/marktext/marktext/issues/2990; https://github.com/marktext/marktext/pull/3002; https://github.com/marktext/marktext/issues/2990
CVE: CVE-2022-25044
Published: 2022-03-05
Description: Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/espruino/Espruino/commit/e069be2ecc5060ef47391716e4de94999595b260; https://github.com/espruino/Espruino/issues/2142; https://github.com/espruino/Espruino/commit/e069be2ecc5060ef47391716e4de94999595b260
CVE: CVE-2022-25465
Published: 2022-03-05
Description: Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/espruino/Espruino/issues/2136; https://github.com/espruino/Espruino/issues/2136
CVE: CVE-2022-0849
Published: 2022-03-05
Description: Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24; https://huntr.dev/bounties/29c5f76e-5f1f-43ab-a0c8-e31951e407b6; https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24
CVE: CVE-2022-24921
Published: 2022-03-05
Description: regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk; https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html
CVE: CVE-2022-0845
Published: 2022-03-05
Description: Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e[PII_REDACTED]ddb4665e8ae; https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a; https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e[PII_REDACTED]ddb4665e8ae
CVE: CVE-2022-26487
Published: 2022-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-26143. Reason: This candidate is a reservation duplicate of CVE-2022-26143. Notes: All CVE users should reference CVE-2022-26143 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-26490
Published: 2022-03-06
Description: st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BG4J46EMFPDD5QHYXDUI3PJCZQ7HQAZR/
CVE: CVE-2021-46703
Published: 2022-03-06
Description: In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/Antaris/RazorEngine/issues/585; https://github.com/Antaris/RazorEngine/issues/585
CVE: CVE-2022-26495
Published: 2022-03-06
Description: In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2022/03/msg00014.html; https://lists.debian.org/nbd/2022/01/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/
CVE: CVE-2022-26496
Published: 2022-03-06
Description: In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://packetstormsecurity.com/files/172148/Shannon-Baseband-fmtp-SDP-Attribute-Memory-Corruption.html; https://lists.debian.org/nbd/2022/01/msg00036.html; https://lists.debian.org/nbd/2022/01/msg00037.html
CVE: CVE-2021-46704
Published: 2022-03-06
Description: In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/genieacs/genieacs/commit/7f295beeecc1c1f14308a93c82413bb334045af6; https://github.com/genieacs/genieacs/releases/tag/v1.2.8; https://github.com/genieacs/genieacs/commit/7f295beeecc1c1f14308a93c82413bb334045af6
CVE: CVE-2022-26505
Published: 2022-03-06
Description: A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.
CVSS Score: 7.4 (HIGH)
CWE: CWE-290
References: http://www.openwall.com/lists/oss-security/2022/03/06/1; https://lists.debian.org/debian-lts-announce/2022/04/msg00005.html; https://security.gentoo.org/glsa/202311-12
CVE: CVE-2022-0869
Published: 2022-03-06
Description: Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/nitely/spirit/commit/8f32f89654d6c30d56e0dd167059d32146fb32ef; https://huntr.dev/bounties/ed335a88-f68c-4e4d-ac85-f29a51b03342; https://github.com/nitely/spirit/commit/8f32f89654d6c30d56e0dd167059d32146fb32ef
CVE: CVE-2022-0868
Published: 2022-03-06
Description: Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/medialize/uri.js/commit/a8166fe02f3af6dc1b2b888dcbb807155aad9509; https://huntr.dev/bounties/5f4db013-64bd-4a6b-9dad-870c296b0b02; https://github.com/medialize/uri.js/commit/a8166fe02f3af6dc1b2b888dcbb807155aad9509
CVE: CVE-2021-44748
Published: 2022-03-06
Description: A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required prior to exploitation, such as entering a malicious website to trigger the vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-44748; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-44748
CVE: CVE-2021-44749
Published: 2022-03-06
Description: A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to arbitrary code execution.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-44749; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-44749
CVE: CVE-2022-0697
Published: 2022-03-06
Description: Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574; https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835b; https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574
CVE: CVE-2022-0766
Published: 2022-03-07
Description: Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/janeczku/calibre-web/commit/965352c8d96c9eae7a6867ff76b0db137d04b0b8; https://huntr.dev/bounties/7f2a5bb4-e6c7-4b6a-b8eb-face9e3add7b; https://github.com/janeczku/calibre-web/commit/965352c8d96c9eae7a6867ff76b0db137d04b0b8
CVE: CVE-2022-0767
Published: 2022-03-07
Description: Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/janeczku/calibre-web/commit/965352c8d96c9eae7a6867ff76b0db137d04b0b8; https://huntr.dev/bounties/b26fc127-9b6a-4be7-a455-58aefbb62d9e; https://github.com/janeczku/calibre-web/commit/965352c8d96c9eae7a6867ff76b0db137d04b0b8
CVE: CVE-2021-24216
Published: 2022-03-07
Description: The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/changeset/2516181#file8; https://wpscan.com/vulnerability/87c6052c-2628-4987-a9a3-a03b5ca1e083; https://plugins.trac.wordpress.org/changeset/2516181#file8
CVE: CVE-2021-24777
Published: 2022-03-07
Description: The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leading to an SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/2dfde2ef-1b33-4dc9-aa3e-02d319effb3a; https://wpscan.com/vulnerability/2dfde2ef-1b33-4dc9-aa3e-02d319effb3a
CVE: CVE-2021-24778
Published: 2022-03-07
Description: The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/e37f9aa6-e409-4155-b8e4-566c5bce58d6; https://wpscan.com/vulnerability/e37f9aa6-e409-4155-b8e4-566c5bce58d6
CVE: CVE-2021-24810
Published: 2022-03-07
Description: The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/94[PII_REDACTED]-4e77-8d7f-b47aa7232e52; https://wpscan.com/vulnerability/94[PII_REDACTED]-4e77-8d7f-b47aa7232e52
CVE: CVE-2021-24821
Published: 2022-03-07
Description: The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price Settings (which gets injected on the edit page as well as any page that embeds the calculator using the shortcode), as well as the Text Preview field of a Project (injected on the edit project page)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/f0915b66-0b99-4aeb-9fba-759cafaeb0cb; https://wpscan.com/vulnerability/f0915b66-0b99-4aeb-9fba-759cafaeb0cb
CVE: CVE-2021-24824
Published: 2022-03-07
Description: The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata. This could lead to sensitive data disclosure, for example when used in combination with WooCommerce, the email address of orders can be retrieved
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/7b4d4675-6089-4435-9b56-31496adc4767; https://wpscan.com/vulnerability/7b4d4675-6089-4435-9b56-31496adc4767
CVE: CVE-2021-24825
Published: 2022-03-07
Description: The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to display arbitrary files from the filesystem (such as logs, .htaccess etc), as well as perform Local File Inclusion attacks as PHP files will be executed. Please note that such attack is still possible by admin+ in single site blogs by default (but won't be when either the unfiltered_html or file_edit is disallowed)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://wpscan.com/vulnerability/be9d6f82-c972-459a-bacf-65b3dfb11a09; https://wpscan.com/vulnerability/be9d6f82-c972-459a-bacf-65b3dfb11a09
CVE: CVE-2021-24826
Published: 2022-03-07
Description: The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v < 4.0.1) or Admin+ (v < 4.0.2) users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Please note that such attack is still possible by admin+ in single site blogs by default (but won't be when the unfiltered_html is disallowed)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e247d78a-7243-486c-a017-7471a8dcb800; https://wpscan.com/vulnerability/e247d78a-7243-486c-a017-7471a8dcb800
CVE: CVE-2021-24952
Published: 2022-03-07
Description: The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the sync_progressive_data parameter for the tvcajax_product_sync_bantch_wise AJAX action before using it in a SQL statement, allowing any authenticated user to perform SQL injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/cbb8fa9f-1c84-4410-ae86-64cb1771ce78; https://wpscan.com/vulnerability/cbb8fa9f-1c84-4410-ae86-64cb1771ce78
CVE: CVE-2021-24953
Published: 2022-03-07
Description: The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the ai_config_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/0529261d-65e1-4c64-b8ed-ecb7356d9067; https://wpscan.com/vulnerability/0529261d-65e1-4c64-b8ed-ecb7356d9067
CVE: CVE-2021-24960
Published: 2022-03-07
Description: The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contributor to configure the upload form in a way that allows uploading of SVG files, which could be then be used for Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/changeset/2677722; https://wpscan.com/vulnerability/18[PII_REDACTED]-498d-808e-c75d1aedc11e; https://plugins.trac.wordpress.org/changeset/2677722
CVE: CVE-2021-24961
Published: 2022-03-07
Description: The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode argument, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2677722; https://wpscan.com/vulnerability/c911bbbd-0196-4e3d-ada3-4efb8a339954; https://plugins.trac.wordpress.org/changeset/2677722
CVE: CVE-2021-25009
Published: 2022-03-07
Description: The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://wpscan.com/vulnerability/ce2e3503-9a06-4f5c-ae0f-f40e7dfb2903; https://wpscan.com/vulnerability/ce2e3503-9a06-4f5c-ae0f-f40e7dfb2903
CVE: CVE-2021-25038
Published: 2022-03-07
Description: The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/72ccdcb9-3d24-41d7-b9fa-c8bd73d30aa6; https://wpscan.com/vulnerability/72ccdcb9-3d24-41d7-b9fa-c8bd73d30aa6
CVE: CVE-2021-25039
Published: 2022-03-07
Description: The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/c92eb2bf-0a5d-40b9-b0be-1820e7b9bebb; https://wpscan.com/vulnerability/c92eb2bf-0a5d-40b9-b0be-1820e7b9bebb
CVE: CVE-2021-25087
Published: 2022-03-07
Description: The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/d7ceafae-65ec-4e05-9ed1-59470771bf07; https://wpscan.com/vulnerability/d7ceafae-65ec-4e05-9ed1-59470771bf07
CVE: CVE-2021-25098
Published: 2022-03-07
Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/960a634d-a88a-4d90-9ac3-7d24b1fe07fe; https://wpscan.com/vulnerability/960a634d-a88a-4d90-9ac3-7d24b1fe07fe
CVE: CVE-2022-0163
Published: 2022-03-07
Description: The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/2b6b0731-4515-498a-82bd-d416f5885268; https://wpscan.com/vulnerability/2b6b0731-4515-498a-82bd-d416f5885268
CVE: CVE-2022-0205
Published: 2022-03-07
Description: The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before outputting them, leading to a Stored Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/446de364-720e-41ec-b80e-7678c8f4ad80; https://wpscan.com/vulnerability/446de364-720e-41ec-b80e-7678c8f4ad80
CVE: CVE-2022-0267
Published: 2022-03-07
Description: The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/7df70f49-547f-4bdb-bf9b-2e06f93488c6; https://wpscan.com/vulnerability/7df70f49-547f-4bdb-bf9b-2e06f93488c6