Skip to content
OpenAdvisories

Archive

28 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /28 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Unscored —
    CVE-2022-23988 Public exploit

    WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting

    The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission

    WS Form WS Form Pro WS Form LITE – Drag & Drop Contact Form Builder for WordPress Web / CMS
  • Unscored —
    CVE-2022-0377 Public exploit

    LearnPress < 4.1.5 - Arbitrary Image Renaming

    Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the ser…

    Web / CMS
  • Unscored —
    CVE-2021-24901 Public exploit

    Security Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting

    The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

    Web / CMS
  • Unscored —
    CVE-2022-26159 Public exploit Scanner template EPSS 13%

    The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such a…