Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-1393 - Before 3 Plugin
The WP Subtitle WordPress plugin before 3.4.1 adds a subtitle field and provides a shortcode to display it via [wp_subtitle]. The subtitle is stored as a custom post meta with the key: "wps_subtitle", which is sanitized upon post save/update, however is not sanitized when updating it directly from the post meta update button (via AJAX) - and this makes the XSS exploitable by authenticated users with a role as low as contributor.
PLUGIN
Before 3
CVE-2022-1393
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0867 - Before 3 Plugin
The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users
PLUGIN
Before 3
CVE-2022-0867
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0948 - Before 3 Plugin
The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
PLUGIN
Before 3
CVE-2022-0948
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0814 - Before 3 Plugin
The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections
PLUGIN
Before 3
CVE-2022-0814
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-1046 - Before 3 Plugin
The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
PLUGIN
Before 3
CVE-2022-1046
Risk Score
Threat Entry
Updated 2025-04-21
CVE-2021-25094 - Before 3 Plugin
The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory. By adding a PHP shell with a filename starting with a dot ".", this can bypass extension control implemented in the plugin. Moreover, there is a race condition in the zip extraction process which makes the shell file live long enough on the filesystem to be callable by an attacker.
PLUGIN
Before 3
CVE-2021-25094
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0656 - Before 3 Plugin
The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to both unauthenticated and authenticated users) before using it in the file_get_contents function and returning its content base64 encoded in the response. As a result, unauthenticated users could read arbitrary files on the web server (such as /etc/passwd, wp-config.php etc)
PLUGIN
Before 3
CVE-2022-0656
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0398 - Before 3 Plugin
The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an arbitrary website
PLUGIN
Before 3
CVE-2022-0398
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0634 - Before 3 Plugin
The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a role as low as Subscriber) to add an image from an external URL to an affiliate link. Further the plugin lacks csrf checks, allowing an attacker to trick a logged in user to perform the action by crafting a special request.
PLUGIN
Before 3
CVE-2022-0634
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-1020 - Before 3 Plugin
The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument
PLUGIN
Before 3
CVE-2022-1020
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0780 - Before 3 Plugin
The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces, granting unauthenticated attackers access to the siq_ajax AJAX action and allowing them to perform Cross-Site Scripting attacks due to the lack of sanitisation and escaping in the customCss parameter
PLUGIN
Before 3
CVE-2022-0780
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0994 - Before 3 Plugin
The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
PLUGIN
Before 3
CVE-2022-0994
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0142 - Before 3 Plugin
The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
PLUGIN
Before 3
CVE-2022-0142
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0141 - Before 3 Plugin
The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks
PLUGIN
Before 3
CVE-2022-0141
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0140 - Before 3 Plugin
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
PLUGIN
Before 3
CVE-2022-0140
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-1008 - Before 3 Plugin
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed
PLUGIN
Before 3
CVE-2022-1008
Risk Score
Threat Entry
Updated 2025-03-21
CVE-2022-0828 - Before 3 Plugin
The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the download.
PLUGIN
Before 3
CVE-2022-0828
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0314 - Before 3 Plugin
The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
PLUGIN
Before 3
CVE-2022-0314
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0969 - Before 3 Plugin
The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.
PLUGIN
Before 3
CVE-2022-0969
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0840 - Before 3 Plugin
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed.
PLUGIN
Before 3
CVE-2022-0840
Risk Score