deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-46668
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://jira.mariadb.org/browse/MDEV-25787; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2021-46669
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://jira.mariadb.org/browse/MDEV-25638; https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/
CVE: CVE-2021-3534
Published: 2022-02-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-34981. Reason: This candidate is a reservation duplicate of CVE-2021-34981. Notes: All CVE users should reference CVE-2021-34981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-23774
Published: 2022-02-01
Description: Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.
CVSS Score: 5.3 (MEDIUM)
References: https://docs.docker.com/docker-for-windows/release-notes/; https://docs.docker.com/docker-for-windows/release-notes/
CVE: CVE-2020-8562
Published: 2022-02-01
Description: As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or StorageClass service providers. As part of this mitigation Kubernetes does a DNS name resolution check and validates that response IPs are not in the link-local (169.254.0.0/16) or localhost (127.0.0.0/8) range. Kubernetes then performs a second DNS resolution without validation for the actual connection. If a non-standard DNS server returns different non-cached responses, a user may be able to bypass the proxy IP restriction and access private networks on the control plane.
CVSS Score: 2.2 (LOW)
CWE: CWE-367, CWE-367
References: https://github.com/kubernetes/kubernetes/issues/101493; https://groups.google.com/g/kubernetes-security-announce/c/-MFX60_wdOY; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-0419
Published: 2022-02-01
Description: NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.openwall.com/lists/oss-security/2022/05/25/1; https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/; https://github.com/radareorg/radare2/commit/feaa4e7f7399c51ee6f52deb84dc3f795b4035d6
CVE: CVE-2022-23602
Published: 2022-02-01
Description: Nimforum is a lightweight alternative to Discourse written in Nim. In versions prior to 2.2.0 any forum user can create a new thread/post with an include referencing a file local to the host operating system. Nimforum will render the file if able. This can also be done silently by using NimForum's post "preview" endpoint. Even if NimForum is running as a non-critical user, the forum.json secrets can be stolen. Version 2.2.0 of NimForum includes patches for this vulnerability. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/nim-lang/Nim/commit/cb894c7094fb49014f85815a9dafc38b5dda743e; https://github.com/nim-lang/nimforum/security/advisories/GHSA-q3vh-x957-wr75; https://github.com/nim-lang/Nim/commit/cb894c7094fb49014f85815a9dafc38b5dda743e
CVE: CVE-2022-23603
Published: 2022-02-01
Description: iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f43aa user input is not properly sanitized and code injection is possible. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-116, CWE-116
References: https://github.com/bildsben/iTunesRPC-Remastered/commit/24f43aac0f4116b3d89fdbe973ba92c6cfb0d998; https://github.com/bildsben/iTunesRPC-Remastered/commit/54b02d9f3a94de94e4fb471908b8cf798e62e411; https://github.com/bildsben/iTunesRPC-Remastered/security/advisories/GHSA-3xpp-rhqx-cw96
CVE: CVE-2022-23607
Published: 2022-02-01
Description: treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HTTPClient` constructor accept cookies as a dictionary. Such cookies are not bound to a single domain, and are therefore sent to *every* domain ("supercookies"). This can potentially cause sensitive information to leak upon an HTTP redirect to a different domain., e.g. should `https://example.com` redirect to `http://cloudstorageprovider.com` the latter will receive the cookie `session`. Treq 2021.1.0 and later bind cookies given to request methods (`treq.request`, `treq.get`, `HTTPClient.request`, `HTTPClient.get`, etc.) to the origin of the *url* parameter. Users are advised to upgrade. For users unable to upgrade Instead of passing a dictionary as the *cookies* argument, pass a `http.cookiejar.CookieJar` instance with properly domain- and scheme-scoped cookies in it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-425
References: https://github.com/twisted/treq/security/advisories/GHSA-fhpf-pp6p-55qc; https://lists.debian.org/debian-lts-announce/2022/03/msg00025.html; https://github.com/twisted/treq/security/advisories/GHSA-fhpf-pp6p-55qc
CVE: CVE-2021-41040
Published: 2022-02-01
Description: In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=577968; https://github.com/eclipse/wakaama/pull/640; https://bugs.eclipse.org/bugs/show_bug.cgi?id=577968
CVE: CVE-2021-43859
Published: 2022-02-01
Description: XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.openwall.com/lists/oss-security/2022/02/09/1; https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846; https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
CVE: CVE-2022-21687
Published: 2022-02-01
Description: gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb[PII_REDACTED]32d9080d8f; https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29; https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb[PII_REDACTED]32d9080d8f
CVE: CVE-2022-23596
Published: 2022-02-01
Description: Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem is patched in 7.4.1. There are no known workarounds and users are advised to upgrade as soon as possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/junrar/junrar/commit/7b16b3d90b91445fd6af0adfed22c07413d4fab7; https://github.com/junrar/junrar/issues/73; https://github.com/junrar/junrar/security/advisories/GHSA-m6cj-93v6-cvr5
CVE: CVE-2022-23597
Published: 2022-02-01
Description: Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the best of our knowledge, the vulnerability has never been exploited in the wild. If you are using Element Desktop < 1.9.7, we recommend upgrading at your earliest convenience. If successfully exploited, the vulnerability allows an attacker to specify a file path of a binary on the victim's computer which then gets executed. Notably, the attacker does *not* have the ability to specify program arguments. However, in certain unspecified configurations, the attacker may be able to specify an URI instead of a file path which then gets handled using standard platform mechanisms. These may allow exploiting further vulnerabilities in those mechanisms, potentially leading to arbitrary code execution.
CVSS Score: 8.3 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vector-im/element-desktop/commit/89b1e39b801655e595337708d4319ba4313feafa; https://github.com/vector-im/element-desktop/security/advisories/GHSA-mjrg-9f8r-h3m7; https://github.com/vector-im/element-desktop/commit/89b1e39b801655e595337708d4319ba4313feafa
CVE: CVE-2021-24648
Published: 2022-02-01
Description: The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2646734; https://wpscan.com/vulnerability/a3573212-2a98-4504-b8f4-b4d46655e17c; https://plugins.trac.wordpress.org/changeset/2646734
CVE: CVE-2021-24686
Published: 2022-02-01
Description: The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2651929; https://wpscan.com/vulnerability/38018695-901d-48d9-b39a-7c00df7f0a4b; https://plugins.trac.wordpress.org/changeset/2651929
CVE: CVE-2021-24707
Published: 2022-02-01
Description: The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0be5e06e-4ff1-43d2-8ba7-2530519d517e; https://wpscan.com/vulnerability/0be5e06e-4ff1-43d2-8ba7-2530519d517e
CVE: CVE-2021-24761
Published: 2022-02-01
Description: The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-352, CWE-22, CWE-352
References: https://wpscan.com/vulnerability/c14e1ba6-fc00-4150-b541-0d6740fee4d2; https://wpscan.com/vulnerability/c14e1ba6-fc00-4150-b541-0d6740fee4d2
CVE: CVE-2021-24762
Published: 2022-02-01
Description: The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/166072/WordPress-Perfect-Survey-1.5.1-SQL-Injection.html; https://wpscan.com/vulnerability/c1620905-7c31-4e62-80f5-1d9635be11ad; http://packetstormsecurity.com/files/166072/WordPress-Perfect-Survey-1.5.1-SQL-Injection.html
CVE: CVE-2021-24763
Published: 2022-02-01
Description: The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c73c7694-1cee-4f26-a425-9c336adce52b; https://wpscan.com/vulnerability/c73c7694-1cee-4f26-a425-9c336adce52b
CVE: CVE-2021-24764
Published: 2022-02-01
Description: The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c2f8e9b9-c044-4c45-8d17-e628e9cb5d59; https://wpscan.com/vulnerability/c2f8e9b9-c044-4c45-8d17-e628e9cb5d59
CVE: CVE-2021-24765
Published: 2022-02-01
Description: The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when the Anonymize IP setting of a survey is turned off, leading to a Stored Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4440e7ca-1a55-444d-8f6c-04153302d750; https://wpscan.com/vulnerability/4440e7ca-1a55-444d-8f6c-04153302d750
CVE: CVE-2021-24775
Published: 2022-02-01
Description: The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://wpscan.com/vulnerability/c6f24afe-d273-4f87-83ca-a791a385b06b; https://wpscan.com/vulnerability/c6f24afe-d273-4f87-83ca-a791a385b06b
CVE: CVE-2021-24814
Published: 2022-02-01
Description: The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web browser led to this endpoint. Javascript code may be executed on a victim's browser. If the victim is an administrator with a valid session cookie, full control of the WordPress instance may be taken (AJAX calls and iframe manipulation are possible because the vulnerable endpoint is on the same domain as the admin panel - there is no same-origin restriction).
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://wpscan.com/vulnerability/94ab34f6-86a9-4e14-bf86-26ff6cb4383e; https://wpscan.com/vulnerability/94ab34f6-86a9-4e14-bf86-26ff6cb4383e
CVE: CVE-2021-24868
Published: 2022-02-01
Description: The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: https://wpscan.com/vulnerability/45a43927-a427-46bc-9c61-e0b8532c8138; https://wpscan.com/vulnerability/45a43927-a427-46bc-9c61-e0b8532c8138
CVE: CVE-2021-24900
Published: 2022-02-01
Description: The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/files/164632/; https://wpscan.com/vulnerability/213d7c08-a37c-49d0-a072-24db711da5ec; https://packetstormsecurity.com/files/164632/
CVE: CVE-2021-24919
Published: 2022-02-01
Description: The Wicked Folders WordPress plugin before 2.8.10 does not sanitise and escape the folder_id parameter before using it in a SQL statement in the wicked_folders_save_sort_order AJAX action, available to any authenticated user. leading to an SQL injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2651221; https://wpscan.com/vulnerability/f472ec7d-765c-4266-ab9c-e2d06703ebb4; https://plugins.trac.wordpress.org/changeset/2651221
CVE: CVE-2021-24926
Published: 2022-02-01
Description: The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8cc7cbbd-f74f-4f30-9483-573641fea733; https://wpscan.com/vulnerability/8cc7cbbd-f74f-4f30-9483-573641fea733
CVE: CVE-2021-24934
Published: 2022-02-01
Description: The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2649978; https://wpscan.com/vulnerability/0aa5a8d5-e736-4cd3-abfd-8e0a356bb6ef; https://plugins.trac.wordpress.org/changeset/2649978
CVE: CVE-2021-24937
Published: 2022-02-01
Description: The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dde3c119-dad9-4205-a931-d49bbf3b6b87; https://wpscan.com/vulnerability/dde3c119-dad9-4205-a931-d49bbf3b6b87
CVE: CVE-2021-24944
Published: 2022-02-01
Description: The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d1bfdce3-89bd-441f-8ebb-02cf0ff8b6cc; https://wpscan.com/vulnerability/d1bfdce3-89bd-441f-8ebb-02cf0ff8b6cc
CVE: CVE-2021-24975
Published: 2022-02-01
Description: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2650138; https://wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1; https://plugins.trac.wordpress.org/changeset/2650138
CVE: CVE-2021-24983
Published: 2022-02-01
Description: The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/31fdabb0-bc74-4d25-b0cd-c872aae6cb2f; https://wpscan.com/vulnerability/31fdabb0-bc74-4d25-b0cd-c872aae6cb2f
CVE: CVE-2021-25063
Published: 2022-02-01
Description: The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e2185887-3e53-4089-aa3f-981c944ee0bb; https://wpscan.com/vulnerability/e2185887-3e53-4089-aa3f-981c944ee0bb
CVE: CVE-2021-25072
Published: 2022-02-01
Description: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a logged in admin delete arbitrary posts via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/53d2c61d-ce73-40e0-a113-9d76d8fecc91; https://wpscan.com/vulnerability/53d2c61d-ce73-40e0-a113-9d76d8fecc91
CVE: CVE-2021-25085
Published: 2022-02-01
Description: The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2648751; https://wpscan.com/vulnerability/b7dd81c6-6af1-4976-b928-421ca69bfa90; https://plugins.trac.wordpress.org/changeset/2648751
CVE: CVE-2021-25089
Published: 2022-02-01
Description: The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5adb977e-f7bf-4d36-b625-87bc23d379c8; https://wpscan.com/vulnerability/5adb977e-f7bf-4d36-b625-87bc23d379c8
CVE: CVE-2021-25091
Published: 2022-02-01
Description: The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/96204946-0b10-4a2c-8079-473883ff95b6; https://wpscan.com/vulnerability/96204946-0b10-4a2c-8079-473883ff95b6
CVE: CVE-2021-25092
Published: 2022-02-01
Description: The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/1cd30913-67c7-46c3-a2de-dcca0c332323; https://wpscan.com/vulnerability/1cd30913-67c7-46c3-a2de-dcca0c332323
CVE: CVE-2021-25093
Published: 2022-02-01
Description: The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/7a7603ce-d76d-4c49-a886-67653bed8cd3; https://wpscan.com/vulnerability/7a7603ce-d76d-4c49-a886-67653bed8cd3
CVE: CVE-2021-25097
Published: 2022-02-01
Description: The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-863, CWE-352, CWE-863
References: https://wpscan.com/vulnerability/67f5beb8-2cb0-4b43-87c7-dead9c005f9c; https://wpscan.com/vulnerability/67f5beb8-2cb0-4b43-87c7-dead9c005f9c