| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-2557 | 8.8 | The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the | 2022-08-23 19:14:00 | 2022-08-22 15:15:00 |
| CVE-2022-2558 | 5.3 | The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations. | 2022-08-23 19:12:00 | 2022-08-22 15:15:00 |
| CVE-2022-2555 | 6.5 | The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack. | 2022-08-23 19:10:00 | 2022-08-22 15:15:00 |
| CVE-2022-35150 | 9.8 | Baijicms v4 was discovered to contain an arbitrary file upload vulnerability. | 2022-08-23 19:06:00 | 2022-08-22 16:15:00 |
| CVE-2022-37175 | 9.8 | Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. | 2022-08-23 19:01:00 | 2022-08-19 21:15:00 |
| CVE-2022-2909 | 8.8 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation leads to unrestricted | 2022-08-23 19:00:00 | 2022-08-20 07:15:00 |
| CVE-2022-2544 | 7.5 | The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes. | 2022-08-23 18:55:00 | 2022-08-22 15:15:00 |
| CVE-2022-1322 | 4.8 | The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed | 2022-08-23 18:49:00 | 2022-08-22 15:15:00 |
| CVE-2022-36030 | 9.8 | Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when | 2022-08-23 18:49:00 | 2022-08-20 00:15:00 |
| CVE-2022-1251 | 4.3 | The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request. | 2022-08-23 18:44:00 | 2022-08-22 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: