Hermit Security Vulnerabilities and Issues — Hermit CVE List

Hermit ProjectHermit

4 matches found

CVE•added 2022/04/28 4:20 p.m.•93 views

CVE-2022-29411

CVE-2022-29411 affects WordPress Hermit plugin versions ≤ 3.1.6. The vulnerability is an unauthenticated SQL Injection via the id parameter (unsanitized/uncalled parameter handling), enabling attackers to inject SQL statements. Impact per sources includes potential disclosure/modify data and poss...

9.8CVSS9.6AI score0.01032EPSS

Save

CVE•added 2022/04/28 4:18 p.m.•93 views

CVE-2022-29412

CVE-2022-29412 corresponds to CSRF vulnerabilities in the WordPress Hermit plugin (versions

5.8CVSS5.7AI score0.00401EPSS

Save

CVE•added 2022/04/28 4:16 p.m.•93 views

CVE-2022-29413

The CVE-2022-29413 entry concerns Mufeng’s Hermit WordPress plugin (versions

6.1CVSS5.4AI score0.00373EPSS

Save

CVE•added 2022/04/28 4:14 p.m.•83 views

CVE-2022-29410

CVE-2022-29410 corresponds to a SQL injection in WordPress plugin Hermit (Hermit 音乐播放器)

8.8CVSS8.6AI score0.00851EPSS

Save