Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.4 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.5AI score0.0021EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/28 6:15 p.m.2 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.0021EPSS
Exploits2References2
OSV
OSV
added 2022/03/28 6:15 p.m.2 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score
Exploits0References1
NVD
NVD
added 2022/03/28 6:15 p.m.8 views

CVE-2022-0620

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.0021EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/03/28 5:23 p.m.11 views

CVE-2022-0620 Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.4AI score0.0021EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/03/28 12:0 a.m.2 views

WordPress plugin Delete Old Orders 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site . WordPress plugin is an open source WordPress application plugin . A cross-site scripting vulnerability exists in WordPress...

6.1CVSS5.6AI score0.0021EPSS
Exploits2References2
Patchstack
Patchstack
added 2022/03/01 12:0 a.m.11 views

WordPress Delete Old Orders plugin <= 0.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Delete Old Orders plugin versions = 0.2. Solution Deactivate and delete. This plugin has been closed as of February 15, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.5AI score0.0021EPSS
Exploits2References3Affected Software1
wpexploit
wpexploit
added 2022/03/01 12:0 a.m.132 views

Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/admin.php?page=woo-delete-old-orders&step=3&date="...

6.1CVSS1.2AI score0.0021EPSS
Exploits2
Rows per page
Query Builder