Lucene search
+L

104 matches found

OSV
OSV
added 2022/01/06 11:15 p.m.2 views

DEBIAN-CVE-2022-21663

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

7.2CVSS7.4AI score0.03565EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/06 11:15 p.m.3 views

DEBIAN-CVE-2022-21664

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected...

8.8CVSS8AI score0.04052EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/06 11:15 p.m.8 views

CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

8CVSS7AI score0.97795EPSS
SaveExploits14References14Affected Software1
NVD
NVD
added 2022/01/06 11:15 p.m.26 views

CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

8CVSS0.97795EPSS
SaveExploits14References11
OSV
OSV
added 2022/01/06 11:15 p.m.5 views

DEBIAN-CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

7.5CVSS7.7AI score0.97795EPSS
SaveExploits14References1
Prion
Prion
added 2022/01/06 11:15 p.m.39 views

Double free

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

5CVSS7.9AI score0.97795EPSS
SaveExploits14References10Affected Software3
UbuntuCve
UbuntuCve
added 2022/01/06 11:15 p.m.110 views

CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

8CVSS7AI score0.97795EPSS
SaveExploits14References7
Prion
Prion
added 2022/01/06 11:15 p.m.29 views

Double free

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected...

6.5CVSS8.8AI score0.04052EPSS
SaveExploits0References7Affected Software3
UbuntuCve
UbuntuCve
added 2022/01/06 11:15 p.m.48 views

CVE-2022-21664

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected...

8.8CVSS7.1AI score0.04052EPSS
SaveExploits0References5
Prion
Prion
added 2022/01/06 11:15 p.m.21 views

Double free

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

3.5CVSS6AI score0.63712EPSS
SaveExploits0References6Affected Software2
UbuntuCve
UbuntuCve
added 2022/01/06 11:15 p.m.38 views

CVE-2022-21662

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

8CVSS6.9AI score0.63712EPSS
SaveExploits0References5
Prion
Prion
added 2022/01/06 11:15 p.m.24 views

Double free

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

6.5CVSS8AI score0.03565EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2022/01/06 11:15 p.m.1 views

UBUNTU-CVE-2022-21662

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

8CVSS6.8AI score0.63712EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/01/06 11:15 p.m.338 views

CVE-2022-21663

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

7.2CVSS7AI score0.03565EPSS
SaveExploits1References5
OSV
OSV
added 2022/01/06 11:15 p.m.5 views

UBUNTU-CVE-2022-21663

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

7.2CVSS7.2AI score0.03565EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2022/01/06 11:5 p.m.3 views

CVE-2022-21662 Stored XSS in WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

8CVSS6.3AI score0.63712EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/01/06 11:5 p.m.90 views

CVE-2022-21662

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

8CVSS4.4AI score0.63712EPSS
SaveExploits0
OSV
OSV
added 2022/01/06 11:5 p.m.20 views

CVE-2022-21662 Stored XSS in WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...

8CVSS6.2AI score0.63712EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2022/01/06 11:0 p.m.5 views

CVE-2022-21663 Authenticated Object Injection in Multisites in WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

6.6CVSS7.3AI score0.03565EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2022/01/06 11:0 p.m.82 views

CVE-2022-21663

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3...

7.2CVSS3.2AI score0.03565EPSS
SaveExploits1
Rows per page
Query Builder