2 matches found
VulnCheck KEV: CVE-2022-29444
Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...
6.5CVSS6.2AI score0.00571EPSS
SaveIn wildExploits0References2
PT-2022-19618
Name of the Vulnerable Software and Affected Versions Cloudways Breeze plugin versions = 2.0.2 Description The issue allows users with a subscriber or higher user role to execute any of the wp ajax actions in the class Breeze Configuration. This includes the ability to change any of the plugin's...
6.5CVSS0.00571EPSS
SaveExploits0References5
20