2 matches found
CVE-2022-1020
The Product Table for WooCommerce wooproducttable WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing...
9.8CVSS7AI score0.25937EPSS
SaveExploits2References1
[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...
7.5CVSS6.1AI score0.01432EPSS
SaveExploits0
20