Lucene search
+L

6033 matches found

CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•19 views

WordPress Plugin reSmush.it Image Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

4.3CVSS6.7AI score0.00511EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2022/11/14 12:00 a.m.•39 views

CVE-2022-2449 reSmush.it Image Optimizer < 0.4.7 - Multiple CSRF

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

6.7AI score0.00342EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/11/14 12:00 a.m.•46 views

CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

5AI score0.00511EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2022/11/14 12:00 a.m.•7 views

CVE-2022-2449 reSmush.it Image Optimizer < 0.4.7 - Multiple CSRF

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

7.1AI score0.00342EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•13 views

WordPress Plugin reSmush.it Image Optimizer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS6.3AI score0.00342EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2022/11/14 12:00 a.m.•11 views

CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

7AI score0.00511EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•6 views

CVE-2022-2449: Cross-Site Request Forgery (CSRF)

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

6.5CVSS5.9AI score0.00342EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•8 views

CVE-2022-2450: Missing Authorization

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

4.3CVSS5.9AI score0.00511EPSS
SaveExploits2References3
Veracode
Veracode
•added 2022/11/10 12:32 a.m.•28 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.8AI score0.01721EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•30 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01683EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•28 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

5.5CVSS6AI score0.01577EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•31 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

5.5CVSS6AI score0.01651EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•37 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01852EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:30 a.m.•27 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01841EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:30 a.m.•36 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01252EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:29 a.m.•20 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

5.5CVSS6AI score0.01086EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:29 a.m.•25 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01252EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:29 a.m.•27 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01303EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/11/10 12:29 a.m.•23 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01252EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/11/10 12:29 a.m.•33 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01303EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder