Lucene search
+L

45 matches found

Cvelist
Cvelist
added 2022/06/20 10:25 a.m.32 views

CVE-2022-1472 Better Find and Replace < 1.3.6 - Admin+ SQLi

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection...

7.6AI score0.01271EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/06/20 12:00 a.m.14 views

WordPress plugin Better Find and Replace SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions prior to WordPress Better Find and Replace plugin 1.3.6 contain a SQL injection...

7.2CVSS6AI score0.01271EPSS
SaveExploits2References2
OSV
OSV
added 2021/10/04 12:15 p.m.12 views

CVE-2021-24676

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.00827EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/10/04 12:15 p.m.5 views

CVE-2021-24676

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2021/10/04 11:20 a.m.36 views

CVE-2021-24676 Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

6.3AI score0.00827EPSS
SaveExploits2References1
Rows per page
Query Builder