CVE-2022-3858 (chaty)
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not properly sanitise and escape…
Devamını oku
Day: Aralık 5, 2022
CVE-2022-3856 (comic_book_management_system)
The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to…
CVE-2022-3846 (workreap)
The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it’s possible to read any user’s notification (employer or freelancer) as…
CVE-2022-3838 (wpupper_share_buttons)
The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2022-3837 (uji_countdown)
The Uji Countdown WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
CVE-2022-3830 (wp_page_builder)
The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2022-3694 (syncee_-_global_dropshipping)
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator’s account. Zafiyet ile ilgili Genel Bilgi,…
CVE-2022-3677 (advanced_import)
The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to make a logged…
CVE-2022-3426 (advanced_wp_columns)
The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2022-3249 (wp_csv_exporter)
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high…