Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

9552 matches found

ATTACKERKB
ATTACKERKB•added 2022/09/06 6:15 p.m.•4 views

CVE-2022-2541

The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This makes i...

8.8CVSS7.2AI score0.00583EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB•added 2022/09/06 6:15 p.m.•3 views

CVE-2022-2540

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4.5. This is due to missing nonce validation on the adminpage function found in the /admin.php file. This makes it possible for unauthenticated...

8.8CVSS7.1AI score0.00553EPSS
SaveExploits0References4
OSV
OSV•added 2022/09/06 6:15 p.m.•8 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS5.6AI score0.00563EPSS
SaveExploits0References4
OSV
OSV•added 2022/09/06 6:15 p.m.•10 views

CVE-2022-2540

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4.5. This is due to missing nonce validation on the adminpage function found in the /admin.php file. This makes it possible for unauthenticated...

8.8CVSS5.5AI score0.00553EPSS
SaveExploits0References3
NVD
NVD•added 2022/09/06 6:15 p.m.•36 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS0.00563EPSS
SaveExploits0References4
OSV
OSV•added 2022/09/06 6:15 p.m.•8 views

CVE-2022-2432

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to missing or incorrect nonce validation on the ecwidupdatepluginparams function. This makes it possible for unauthenticated attackers to updat...

4.3CVSS5.6AI score0.00491EPSS
SaveExploits2References2
OSV
OSV•added 2022/09/06 6:15 p.m.•9 views

CVE-2022-2233

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabcadminslidespostback function found in the /admin/admin.php file. This makes it possible for unauthenticated attackers to inje...

8.8CVSS5.8AI score0.00557EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2022/09/06 6:15 p.m.•4 views

CVE-2022-2233

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabcadminslidespostback function found in the /admin/admin.php file. This makes it possible for unauthenticated attackers to inje...

8.8CVSS5.9AI score0.00557EPSS
SaveExploits0References4
Prion
Prion•added 2022/09/06 6:15 p.m.•27 views

Cross site request forgery (csrf)

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to missing or incorrect nonce validation on the ecwidupdatepluginparams function. This makes it possible for unauthenticated attackers to updat...

4.3CVSS4.4AI score0.00491EPSS
SaveExploits2References2Affected Software1
Prion
Prion•added 2022/09/06 6:15 p.m.•19 views

Cross site request forgery (csrf)

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

5.8CVSS5.8AI score0.00453EPSS
SaveExploits0References4Affected Software1
Prion
Prion•added 2022/09/06 6:15 p.m.•16 views

Cross site request forgery (csrf)

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4.5. This is due to missing nonce validation on the adminpage function found in the /admin.php file. This makes it possible for unauthenticated...

6.8CVSS7.9AI score0.00553EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2022/09/06 6:15 p.m.•17 views

Cross site request forgery (csrf)

The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This makes i...

6.8CVSS7.8AI score0.00583EPSS
SaveExploits0References4Affected Software1
Prion
Prion•added 2022/09/06 6:15 p.m.•22 views

Cross site request forgery (csrf)

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

6.8CVSS7.8AI score0.00563EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment•added 2022/09/06 5:18 p.m.•9 views

CVE-2022-2541 uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting

The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This makes i...

8.8CVSS7.1AI score0.00583EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2022/09/06 5:18 p.m.•38 views

CVE-2022-2541 uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting

The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This makes i...

8.8CVSS8.1AI score0.00583EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/09/06 5:18 p.m.•5 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS6.1AI score0.00563EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2022/09/06 5:18 p.m.•34 views

CVE-2022-2518 Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

8.8CVSS8.5AI score0.00453EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/09/06 5:18 p.m.•12 views

CVE-2022-2432 Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to missing or incorrect nonce validation on the ecwidupdatepluginparams function. This makes it possible for unauthenticated attackers to updat...

8.8CVSS8.4AI score0.00491EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment•added 2022/09/06 5:18 p.m.•4 views

CVE-2022-2233 Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabcadminslidespostback function found in the /admin/admin.php file. This makes it possible for unauthenticated attackers to inje...

8.8CVSS7.2AI score0.00557EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2022/09/06 12:00 a.m.•14 views

PT-2022-16604 · Ecwid · Ecwid Ecommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Ecwid Ecommerce Shopping Cart plugin for WordPress versions up to, and including, 6.10.23 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ecwid update plugin params function...

8.8CVSS4.3AI score0.00491EPSS
SaveExploits2References5
Rows per page
Query Builder