Search vulnerabilities

Expected end of text, found ':' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,898

CVE-2022-2393

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Pki-core Project Redhat
Products
Pki-core Certificate System Enterprise Linux and 1 more
CVE-2022-2392

Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Lana
Products
Lana Downloads Manager
CVE-2022-2391

Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wpzoom
Products
Inspiro Pro
CVE-2022-2389

Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation

The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, allowing any authenticated users, such as subscriber to create automations

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Funnelkit
Products
Funnelkit Automations
CVE-2022-2388

WP Coder < 2.5.3 - Code Deletion via CSRF

The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wow-company
Products
Wp Coder
CVE-2022-2386

Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting

The Crowdsignal Dashboard WordPress plugin before 3.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Automattic
Products
Crowdsignal Dashboard
CVE-2022-2385

AccessKeyID validation bypass

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Kubernetes
Products
Aws-iam-authenticator
CVE-2022-2384

Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Digital Publications By Supsystic
CVE-2022-2383

Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS 5.9% KEV · Not listed
Vendors
Slickremix
Products
Feed Them Social
CVE-2022-2382

Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Shapedplugin
Products
Product Slider For Woocommerce
CVE-2022-2381

E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
E Unlocked - Student Result Project
Products
E Unlocked - Student Result
CVE-2022-2379

Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Easy Student Results Project
Products
Easy Student Results
CVE-2022-2378

Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Easy Student Results Project
Products
Easy Student Results
CVE-2022-2377

Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending

The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpwax
Products
Directorist
CVE-2022-2376

Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users

CVSS 3.1 · 5.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Wpwax
Products
Directorist
CVE-2022-2375

WP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS

The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them. Furthermore, due to the lack of escaping in some of them, it could lead to Stored Cross-Site Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Okapitech
Products
Wp Sticky Button
CVE-2022-2374

Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nsqua
Products
Simply Schedule Appointments
CVE-2022-2373

Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

CVSS 3.1 · 5.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Nsqua
Products
Simply Schedule Appointments
CVE-2022-2372

YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting

The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Yaycommerce
Products
Yaysmtp
CVE-2022-2371

YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting

The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users with a role as low as subscriber to change them, and use that to conduct Stored Cross-Site Scripting attack due to the lack of escaping in them as well.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Yaycommerce
Products
Yaysmtp