Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:45 a.m.•13 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/03/28 6:15 p.m.•10 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2022/03/28 6:15 p.m.•14 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
NVD
NVD
•added 2022/03/28 6:15 p.m.•24 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.008EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/03/28 5:23 p.m.•37 views

CVE-2022-0620 Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.4AI score0.008EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2022/03/28 12:00 a.m.•4 views

PT-2022-13304

Name of the Vulnerable Software and Affected Versions Delete Old Orders WordPress plugin versions 0.2 and earlier Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the date parameter is not properly sanitized and escaped before being outputted back in an...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/28 12:00 a.m.•17 views

WordPress plugin Delete Old Orders 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site . WordPress plugin is an open source WordPress application plugin . A cross-site scripting vulnerability exists in WordPress...

6.1CVSS5.6AI score0.008EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/28 12:00 a.m.•6 views

CVE-2022-0620: Improper Neutralization of Input During Web Page Generation

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2022/03/01 12:00 a.m.•134 views

Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/admin.php?page=woo-delete-old-orders&step=3&date="...

6.1CVSS1.2AI score0.008EPSS
SaveExploits2
Patchstack
Patchstack
•added 2022/03/01 12:00 a.m.•23 views

WordPress Delete Old Orders plugin <= 0.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Delete Old Orders plugin versions = 0.2. Solution Deactivate and delete. This plugin has been closed as of February 15, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.5AI score0.008EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder