Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2022-41695
Disclosure Date: January 17, 2024 (last updated January 24, 2024)
Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5.
0
Attacker Value
Unknown
CVE-2022-41619
Disclosure Date: January 17, 2024 (last updated January 24, 2024)
Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8.
0
Attacker Value
Unknown
CVE-2022-42460
Disclosure Date: October 24, 2022 (last updated December 22, 2024)
Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.
0
Attacker Value
Unknown
CVE-2022-40219
Disclosure Date: September 21, 2022 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
0
Attacker Value
Unknown
CVE-2022-22735
Disclosure Date: March 14, 2022 (last updated October 07, 2023)
The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenticated users, such as subscriber to perform SQL injection attacks
0
Attacker Value
Unknown
CVE-2022-22734
Disclosure Date: March 14, 2022 (last updated October 07, 2023)
The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them
0
