deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-1452
Published: 2022-04-24
Description: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/radareorg/radare2/commit/ecc44b6a2f18ee70ac133365de0e509d26d5e168; https://huntr.dev/bounties/c8f4c2de-7d96-4ad4-857a-c099effca2d6; https://github.com/radareorg/radare2/commit/ecc44b6a2f18ee70ac133365de0e509d26d5e168
CVE: CVE-2022-29077
Published: 2022-04-25
Description: A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ripple/rippled/compare/1.8.4...1.8.5; https://ripple.com/; https://xrpl.org/blog/2022/rippled-1.8.5.html
CVE: CVE-2022-29546
Published: 2022-04-25
Description: HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product.
CVSS Score: 7.5 (HIGH)
References: https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg; https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg
CVE: CVE-2019-25059
Published: 2022-04-25
Description: Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.
CVSS Score: 7.8 (HIGH)
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0; https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0
CVE: CVE-2022-29603
Published: 2022-04-25
Description: A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. A remote authenticated attacker could send crafted SQL statements to a vulnerable endpoint (such as /api/students/me/messages/) to, for example, retrieve personal information or change grades.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://gitlab.com/universis/universis-api/-/commit/39e47d7f4654c83296b8de61b243b510c375d3fb; https://suumcuique.org/blog/posts/sql-injection-vulnerability-universis/; https://gitlab.com/universis/universis-api/-/commit/39e47d7f4654c83296b8de61b243b510c375d3fb
CVE: CVE-2021-40680
Published: 2022-04-25
Description: There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2022/Apr/39; http://seclists.org/fulldisclosure/2022/Apr/39
CVE: CVE-2021-36628
Published: 2022-04-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-40680. Reason: This candidate is a reservation duplicate of CVE-2021-40680. Notes: All CVE users should reference CVE-2021-40680 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-29264
Published: 2022-04-25
Description: An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7; https://review.coreboot.org/c/coreboot/+/63478; https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7
CVE: CVE-2022-1457
Published: 2022-04-25
Description: Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the user account.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/neorazorx/facturascripts/commit/b3e7527d1e100898c15fec067825b6bc738613df; https://huntr.dev/bounties/8c80caa0-dc89-43f2-8f5f-db02d2669046; https://github.com/neorazorx/facturascripts/commit/b3e7527d1e100898c15fec067825b6bc738613df
CVE: CVE-2022-1458
Published: 2022-04-25
Description: Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/31f08005e53b17d1bc921d23f7ee774930ad416d; https://huntr.dev/bounties/[PII_REDACTED]-a81e-f699cd6981b0; https://github.com/openemr/openemr/commit/31f08005e53b17d1bc921d23f7ee774930ad416d
CVE: CVE-2022-1459
Published: 2022-04-25
Description: Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.
CVSS Score: 8.3 (HIGH)
CWE: CWE-1118, CWE-639
References: https://github.com/openemr/openemr/commit/8f8a97724c0e8fcc4096b4b30af9aaf064ada45a; https://huntr.dev/bounties/9023ca9b-a601-4e5d-8952-640c60d029f1; https://github.com/openemr/openemr/commit/8f8a97724c0e8fcc4096b4b30af9aaf064ada45a
CVE: CVE-2021-45836
Published: 2022-04-25
Description: An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]) by injecting a maliciously crafted input in the request through /tos/index.php?app/hand_app.
CVSS Score: 8.8 (HIGH)
References: https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE: CVE-2021-45837
Published: 2022-04-25
Description: It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]) by sending a specifically crafted input to /tos/index.php?app/del.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE: CVE-2021-45839
Published: 2022-04-25
Description: It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]) as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/webNasIPS endpoint.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE: CVE-2021-45840
Published: 2022-04-25
Description: It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]) by sending specifically crafted input to /tos/index.php?app/app_start_stop.
CVSS Score: 9.8 (CRITICAL)
References: https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE: CVE-2021-45841
Published: 2022-04-25
Description: In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]), an attacker can self-sign session cookies by knowing the target's MAC address and the user's password hash. Guest users (disabled by default) can be abused using a null/empty hash and allow an unauthenticated attacker to login as guest.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-798
References: http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE: CVE-2021-45842
Published: 2022-04-25
Description: It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15[PII_REDACTED]) on the system as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/wapNasIPS endpoint.
CVSS Score: 7.5 (HIGH)
References: https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/; https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE: CVE-2022-1461
Published: 2022-04-25
Description: Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1220, CWE-639
References: https://github.com/openemr/openemr/commit/3af1f4a28a8df0e[PII_REDACTED]14ed08cc8e0889d; https://huntr.dev/bounties/690a8ec5-64fc-4180-9f1f-c3c599bae0a9; https://github.com/openemr/openemr/commit/3af1f4a28a8df0e[PII_REDACTED]14ed08cc8e0889d
CVE: CVE-2022-28871
Published: 2022-04-25
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28871; https://www.withsecure.com/en/support/security-advisories/cve-2022-28871; https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28871
CVE: CVE-2021-36460
Published: 2022-04-25
Description: VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the benefits of storing hashed passwords in the database useless.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://veryfitpro.com; http://www.i-doo.cn; https://github.com/martinfrancois/CVE-2021-36460
CVE: CVE-2022-27103
Published: 2022-04-25
Description: element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/asjdf/element-table-xss-test/; https://github.com/asjdf/element-table-xss-test/issues/1; https://github.com/element-plus/element-plus/issues/6514
CVE: CVE-2022-27135
Published: 2022-04-25
Description: xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42232; https://github.com/verf1sh/Poc/blob/master/pic_ppm.png; https://github.com/verf1sh/Poc/blob/master/poc_ppm
CVE: CVE-2022-27311
Published: 2022-04-25
Description: Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/amro/gibbon/commit/b2eb99ed304d7491a6d348a5bbdc83a008fc6e0b; https://github.com/amro/gibbon/commit/cade20ca2438cd1b182dad70cbb77fb895779d10; https://github.com/amro/gibbon/pull/321
CVE: CVE-2022-27428
Published: 2022-04-25
Description: A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the album_name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bensonarts/GalleryCMS/issues/20; https://github.com/bensonarts/GalleryCMS/issues/20
CVE: CVE-2022-27429
Published: 2022-04-25
Description: Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/Cherry-toto/jizhicms/issues/67; https://github.com/Cherry-toto/jizhicms/issues/67
CVE: CVE-2022-28053
Published: 2022-04-25
Description: Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/typemill/typemill/issues/325; https://github.com/typemill/typemill/issues/325
CVE: CVE-2022-28506
Published: 2022-04-25
Description: There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/verf1sh/Poc/blob/master/asan_report_giflib.png; https://github.com/verf1sh/Poc/blob/master/giflib_poc; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/
CVE: CVE-2022-28586
Published: 2022-04-25
Description: XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/havok89/Hoosk/issues/63; https://github.com/havok89/Hoosk/issues/63
CVE: CVE-2022-26111
Published: 2022-04-25
Description: The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an existing/predefined search) of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in the context of the IRISNext application user, running on the web server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-917
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-26111.pdf; https://varsnext.iriscorporate.com/; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-26111.pdf
CVE: CVE-2022-28093
Published: 2022-04-25
Description: SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
References: http://scbs.com; https://github.com/wkeyi0x1/vul-report/blob/main/SCBS%20online%20sports%20venue%20reservation%20system/SCBS%20online%20sports%20venue%20reservation%20system%20v1.0%20-%20File%20Inclusion.md; https://www.sourcecodester.com/php/15236/online-sports-complex-booking-system-phpmysql-free-source-code.html
CVE: CVE-2022-28094
Published: 2022-04-25
Description: SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://scbs.com; https://github.com/wkeyi0x1/vul-report/blob/main/SCBS%20online%20sports%20venue%20reservation%20system/SCBS%20online%20sports%20venue%20reservation%20system%20v1.0%20-%20Self-XSS.md; https://www.sourcecodester.com/php/15236/online-sports-complex-booking-system-phpmysql-free-source-code.html
CVE: CVE-2022-29078
Published: 2022-04-25
Description: The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command (which is executed upon template compilation).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://eslam.io/posts/ejs-server-side-template-injection-rce/; https://github.com/mde/ejs/releases; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-24800
Published: 2022-04-25
Description: The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346; https://wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346
CVE: CVE-2021-24805
Published: 2022-04-25
Description: The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/a6be3fcf-60f7-4f13-b773-871a7296113c; https://wpscan.com/vulnerability/a6be3fcf-60f7-4f13-b773-871a7296113c
CVE: CVE-2021-24957
Published: 2022-04-25
Description: The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a282606f-6abf-4f75-99c9-dab0bea8cc96; https://wpscan.com/vulnerability/a282606f-6abf-4f75-99c9-dab0bea8cc96
CVE: CVE-2021-25094
Published: 2022-04-25
Description: The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory. By adding a PHP shell with a filename starting with a dot ".", this can bypass extension control implemented in the plugin. Moreover, there is a race condition in the zip extraction process which makes the shell file live long enough on the filesystem to be callable by an attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-306, CWE-306
References: http://packetstormsecurity.com/files/167190/WordPress-Tatsu-Builder-Remote-Code-Execution.html; https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/; https://wpscan.com/vulnerability/fb0097a0-5d7b-4e5b-97de-aacafa8fffcd
CVE: CVE-2021-25111
Published: 2022-04-25
Description: The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/af548fab-96c2-4129-b609-e24aad0b1fc4; https://wpscan.com/vulnerability/af548fab-96c2-4129-b609-e24aad0b1fc4
CVE: CVE-2021-39040
Published: 2022-04-25
Description: IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/214025; https://www.ibm.com/support/pages/node/6574003; https://exchange.xforce.ibmcloud.com/vulnerabilities/214025
CVE: CVE-2021-46780
Published: 2022-04-25
Description: The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cba4ccdd-9331-4ca0-b910-8f427ed9b540; https://wpscan.com/vulnerability/cba4ccdd-9331-4ca0-b910-8f427ed9b540
CVE: CVE-2021-46781
Published: 2022-04-25
Description: The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/49589867-f764-4c4a-b640-84973c673b23; https://wpscan.com/vulnerability/49589867-f764-4c4a-b640-84973c673b23
CVE: CVE-2021-46782
Published: 2022-04-25
Description: The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bf; https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bf
CVE: CVE-2021-4225
Published: 2022-04-25
Description: The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that on Windows servers, the security checks in place were insufficient, enabling bad actors to potentially upload backdoors on vulnerable sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/pang0lin/CVEproject/blob/main/wordpress_SP-Project_fileupload.md; https://wpscan.com/vulnerability/bd1083d1-edcc-482e-a8a9-c8b6c8d417bd; https://github.com/pang0lin/CVEproject/blob/main/wordpress_SP-Project_fileupload.md
CVE: CVE-2022-0287
Published: 2022-04-25
Description: The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing any authenticated user, such as subscriber to call and retrieve all email addresses from the blog
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/6cd7cd6d-1cc1-472c-809b-b66389f149b0; https://wpscan.com/vulnerability/6cd7cd6d-1cc1-472c-809b-b66389f149b0
CVE: CVE-2022-0363
Published: 2022-04-25
Description: The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenticated users, such as subscribers, to call it and import mycred setup, thus creating badges, managing points or creating arbitrary posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/a438a951-497c-43cd-822f-1a48d4315191; https://wpscan.com/vulnerability/a438a951-497c-43cd-822f-1a48d4315191
CVE: CVE-2022-0398
Published: 2022-04-25
Description: The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an arbitrary website
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/21aec131-91ff-4300-ac7a-0bf31d6b2b24; https://wpscan.com/vulnerability/21aec131-91ff-4300-ac7a-0bf31d6b2b24
CVE: CVE-2022-0541
Published: 2022-04-25
Description: The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://wpscan.com/vulnerability/822cac2c-decd-4aa4-9e8e-1ba2d0c080ce; https://wpscan.com/vulnerability/822cac2c-decd-4aa4-9e8e-1ba2d0c080ce
CVE: CVE-2022-0634
Published: 2022-04-25
Description: The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a role as low as Subscriber) to add an image from an external URL to an affiliate link. Further the plugin lacks csrf checks, allowing an attacker to trick a logged in user to perform the action by crafting a special request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/7e11aeb0-b231-407d-86ec-9018c2c7eee3; https://wpscan.com/vulnerability/7e11aeb0-b231-407d-86ec-9018c2c7eee3