Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Hermit ProjectHermit

4 matches found

CVE
CVE•added 2022/04/28 4:18 p.m.•89 views

CVE-2022-29412

CVE-2022-29412 corresponds to CSRF vulnerabilities in the WordPress Hermit plugin (versions

5.8CVSS5.7AI score0.00393EPSS
CVE
CVE•added 2022/04/28 4:20 p.m.•88 views

CVE-2022-29411

CVE-2022-29411 affects WordPress Hermit plugin versions ≤ 3.1.6. The vulnerability is an unauthenticated SQL Injection via the id parameter (unsanitized/uncalled parameter handling), enabling attackers to inject SQL statements. Impact per sources includes potential disclosure/modify data and poss...

9.8CVSS9.6AI score0.01045EPSS
CVE
CVE•added 2022/04/28 4:16 p.m.•88 views

CVE-2022-29413

The CVE-2022-29413 entry concerns Mufeng’s Hermit WordPress plugin (versions

6.1CVSS5.4AI score0.00366EPSS
CVE
CVE•added 2022/04/28 4:14 p.m.•78 views

CVE-2022-29410

CVE-2022-29410 corresponds to a SQL injection in WordPress plugin Hermit (Hermit 音乐播放器)

8.8CVSS8.6AI score0.00862EPSS