Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
WpvarWp Shamsi

3 matches found

CVE
CVE•added 2022/09/09 2:39 p.m.•75 views

CVE-2022-38058

WP Shamsi plugin for WordPress is affected up to version 4.1.1 by an authenticated settings-change vulnerability. The root cause is missing authorization checks on plugin settings changes, allowing a subscriber+ to modify settings. Remediation: update to a version greater than 4.1.1 (Patch guidan...

4.3CVSS4.6AI score0.00538EPSS
CVE
CVE•added 2023/03/27 3:37 p.m.•56 views

CVE-2023-0335

The CVE-2023-0335 entry concerns the WP Shamsi WordPress plugin (versions up to 4.3.3). The connected sources confirm CSRF and broken access control vulnerabilities that allow a user with as little as Subscriber privileges to delete attachments. The underlying issue is a lack of CSRF validation a...

6.5CVSS6.7AI score0.01003EPSS
Web
CVE
CVE•added 2022/12/16 1:54 p.m.•52 views

CVE-2022-4555

The CVE-2022-4555 issue affects the WP Shamsi WordPress plugin (

6.5CVSS5.3AI score0.00665EPSS