Skip to content
OpenAdvisories

Archive

21 March 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2022-0739 Public exploit EPSS 37%

    BookingPress < 1.0.11 - Unauthenticated SQL Injection

    The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), lead…

  • Unscored —
    CVE-2022-0591 Public exploit Scanner template EPSS 20%

    Formcraft3 < 3.8.28 - Unauthenticated SSRF

    The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users