CVE-2022 第55页
CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting

漏洞标题 CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting 漏洞描述 WordPress Contact Form 7 before 1.3.6.3 contains an unauthenticated stored cross...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月1日 11:54
30
CVE-2022-0827: WordPress Best Books <=2.6.3 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0827: WordPress Best Books <=2.6.3 - SQL Injection

漏洞标题 CVE-2022-0827: WordPress Best Books <=2.6.3 - SQL Injection 漏洞描述 WordPress Best Books plugin through 2.6.3 is susceptible to SQL injection. The plugin does not sani...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月3日 17:11
30
CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection

漏洞标题 CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection 漏洞描述 WordPress Order Listener for WooCommerce plugin before 3.2.2 contains a SQL inje...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月20日 11:41
30
CVE-2022-0952: WordPress Sitemap by click5 <1.0.36 - Missing Authorization-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0952: WordPress Sitemap by click5 <1.0.36 - Missing Authorization

漏洞标题 CVE-2022-0952: WordPress Sitemap by click5 <1.0.36 - Missing Authorization 漏洞描述 WordPress Sitemap by click5 plugin before 1.0.36 is susceptible to missing authoriza...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月14日 08:38
30
CVE-2022-1390: WordPress Admin Word Count Column 2.2 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1390: WordPress Admin Word Count Column 2.2 – Local File Inclusion

漏洞标题 CVE-2022-1390: WordPress Admin Word Count Column 2.2 - Local File Inclusion 漏洞描述 The plugin does not validate the path parameter given to readfile(), which could allow...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月4日 05:12
30
CVE-2022-1574: WordPress HTML2WP <=1.0.0 - Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1574: WordPress HTML2WP <=1.0.0 - Arbitrary File Upload

漏洞标题 CVE-2022-1574: WordPress HTML2WP <=1.0.0 - Arbitrary File Upload 漏洞描述 WordPress HTML2WP plugin through 1.0.0 contains an arbitrary file upload vulnerability. The pl...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月12日 23:42
30
CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting

漏洞标题 CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting 漏洞描述 WordPress Simple Membership plugin before 4.1.1 contains a reflected cross-site script...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月20日 08:14
30
CVE-2022-2379: WordPress Easy Student Results <=2.2.8 - Improper Authorization-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2379: WordPress Easy Student Results <=2.2.8 - Improper Authorization

漏洞标题 CVE-2022-2379: WordPress Easy Student Results <=2.2.8 - Improper Authorization 漏洞描述 WordPress Easy Student Results plugin through 2.2.8 is susceptible to informatio...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月20日 16:55
30
CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass

漏洞标题 CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass 漏洞描述 WordPress Duplicator plugin before 1.4.7 is susceptible to authentication bypass. The plugin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月13日 21:22
30
CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting

漏洞标题 CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting 漏洞描述 WordPress Elementor Website Builder plugin 3.5.5 and prior con...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月2日 15:31
30
CVE-2022-3578: WordPress ProfileGrid <5.1.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3578: WordPress ProfileGrid <5.1.1 - Cross-Site Scripting

漏洞标题 CVE-2022-3578: WordPress ProfileGrid <5.1.1 - Cross-Site Scripting 漏洞描述 WordPress ProfileGrid plugin prior to 5.1.1 contains a cross-site scripting vulnerability. T...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月3日 10:33
30
CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting

漏洞标题 CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting 漏洞描述 The plugin includes a vendored dompdf example file which is susceptible to Reflected ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年6月2日 03:51
30
CVE-2022-32770: WWBN AVideo 11.6 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32770: WWBN AVideo 11.6 – Cross-Site Scripting

漏洞标题 CVE-2022-32770: WWBN AVideo 11.6 - Cross-Site Scripting 漏洞描述 WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月18日 08:17
30
CVE-2022-28032: Atom CMS v2.0 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-28032: Atom CMS v2.0 – SQL Injection

漏洞标题 CVE-2022-28032: Atom CMS v2.0 - SQL Injection 漏洞描述 AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月7日 11:59
30
CVE-2022-33198: WordPress Accordions  - Unauthenticated Settings Update-渗透云记 - 专注于网络安全与技术分享

CVE-2022-33198: WordPress Accordions – Unauthenticated Settings Update

漏洞标题 CVE-2022-33198: WordPress Accordions - Unauthenticated Settings Update 漏洞描述 Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年11月16日 19:30
30
CVE-2022-0206: WordPress NewStatPress <1.3.6 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0206: WordPress NewStatPress <1.3.6 - Cross-Site Scripting

漏洞标题 CVE-2022-0206: WordPress NewStatPress <1.3.6 - Cross-Site Scripting 漏洞描述 WordPress NewStatPress plugin before 1.3.6 is susceptible to cross-site scripting. The plug...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月5日 23:47
30