Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 11:27 p.m.•25 views

CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS7.5AI score0.14882EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/06/15 12:00 a.m.•6 views

PT-2024-37197

Name of the Vulnerable Software and Affected Versions: AI Infographic Maker plugin for WordPress versions up to, and including, 4.7.4 Description: The issue allows authenticated attackers with Subscriber-level access and above to update arbitrary post titles due to a missing capability check on t...

4.3CVSS5.9AI score0.00323EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•16 views

WordPress plugin AI Infographic Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00339EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2023/11/30 12:00 a.m.•16 views

VulnCheck KEV: CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS8.2AI score0.14882EPSS
SaveIn wildExploits2References554
OSV
OSV
•added 2022/03/21 7:15 p.m.•15 views

CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS5.8AI score0.14882EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/03/21 7:15 p.m.•13 views

CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS5.8AI score0.14882EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/21 12:00 a.m.•35 views

WordPress plugin Infographic Maker SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin...

9.8CVSS8.5AI score0.14882EPSS
SaveExploits2References3
Rows per page
Query Builder