Lucene search
K

119 matches found

Patchstack
Patchstack
added 2023/12/04 12:0 a.m.19 views

WordPress Advanced Database Cleaner Plugin <= 3.1.2 is vulnerable to SQL Injection

Software Advanced Database Cleaner Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-49764 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 18ca57291df6 Credits Mika Required privilege Administrator...

7.6CVSS6.8AI score0.00139EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.13 views

WordPress Advanced Database Cleaner Plugin < 3.1.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

6.1CVSS6.4AI score0.0021EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.13 views

WordPress Advanced Database Cleaner Plugin < 3.0.4 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

6.1CVSS6.4AI score0.0021EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.10 views

WordPress Advanced Database Cleaner Plugin < 3.0.2 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

7.2CVSS7AI score0.00534EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.10 views

WordPress Advanced Database Cleaner Plugin < 3.1.2 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

8.8CVSS7AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2023/05/23 3:15 p.m.9 views

CVE-2022-46813

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References1
OSV
OSV
added 2023/05/23 3:15 p.m.1 views

CVE-2022-46813

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References1
Prion
Prion
added 2023/05/23 3:15 p.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

6.8CVSS8.7AI score0.00106EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 2:49 p.m.12 views

CVE-2022-46813 WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

4.3CVSS9.1AI score0.00106EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/23 2:49 p.m.7 views

CVE-2022-46813 WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

4.3CVSS7AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2023/05/23 2:49 p.m.42 views

CVE-2022-46813

CVE-2022-46813 affects the WordPress plugin Advanced Database Cleaner (versions

8.8CVSS6.5AI score0.00106EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.3 views

WordPress plugin Advanced Database Cleaner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.3AI score0.00106EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2023/02/21 12:0 a.m.15 views

Advanced Database Cleaner <= 3.1.1 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make logged-in admins perform such action via a CSRF attack...

8.8CVSS6.7AI score0.00106EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2023/02/21 12:0 a.m.11 views

WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Advanced Database Cleaner Type Plugin Vulnerable versions = 3.1.1 Fixed in 3.1.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46813 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f4bc8afbea0f Credits thiennv...

8.8CVSS7AI score0.00106EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/07/19 12:0 a.m.22 views

WordPress plugin Advanced Database Cleaner Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6AI score0.0021EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/07/17 11:15 a.m.2 views

CVE-2022-2173

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.0021EPSS
Exploits2References2
OSV
OSV
added 2022/07/17 11:15 a.m.1 views

CVE-2022-2173

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.0021EPSS
Exploits2References1
Prion
Prion
added 2022/07/17 11:15 a.m.18 views

Cross site scripting

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

4.3CVSS6.1AI score0.0021EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2022/07/17 12:0 a.m.2 views

WordPress plugin Advanced Database Cleaner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.9AI score0.0021EPSS
Exploits2References2
Patchstack
Patchstack
added 2022/06/27 12:0 a.m.24 views

WordPress Advanced Database Cleaner plugin <= 3.1.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by ZhongFu Su aka JrXnm WuHan University in WordPress Advanced Database Cleaner plugin versions = 3.1.0. Solution Update the WordPress Advanced Database Cleaner plugin to the latest available version at least 3.1.1...

6.1CVSS2.2AI score0.0021EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder