Archive
August 2022
Vulnerabilities first published in this month (UTC), newest first.
2,333 results · Feed
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of …
-
Unscored —
In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This cou…
-
Unscored —
In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of p…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —
In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —CVE-2022-21789 Public exploit
In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of pri…
-
Unscored —
In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation …
-
High 7.2
WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
-
Low 3.4
WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
-
Unscored —
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them
-
Unscored —
YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users, such as subscriber to view the Logs of the plugin
-
Unscored —
Flexi Quote Rotator <= 0.9.4 - Admin+ Stored Cross-Site Scripting
The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Invitation Based Registrations <= 2.2.84 - Admin+ Stored Cross-Site Scripting
The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is di…
-
Unscored —
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.
-
Unscored —
WordPress Popup <= 1.9.3.8 - Admin+ Stored Cross-Site Scripting
The WordPress Popup WordPress plugin through 1.9.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for …
-
Unscored —
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not validate, sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabili…
-
Unscored —
Simple Membership < 4.1.3 - Membership Privilege Escalation
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.
-
Unscored —
GiveWP < 2.21.3 - DoS via CSRF
The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exporting parameters such as dates, which could allow attackers to make a logged in admin DoS the web server via a CSRF attack as the plugin w…
-
Unscored —
Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
-
Unscored —
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of validation, san…
-
Unscored —
GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting
The GiveWP WordPress plugin before 2.21.3 does not properly sanitise and escape the currency settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for e…
-
Unscored —
CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF
The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server.
-
Unscored —
Advanced WordPress Reset < 1.6 - Reflected Cross-Site Scripting
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
-
Unscored —
Progressive License <= 1.1.0 - CSRF to Stored XSS
The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the setting…
-
Unscored —
Microsoft Advertising Universal Event Tracking < 1.0.4 - Admin+ Stored Cross-Site Scripting
The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is d…
-
Unscored —CVE-2022-1950 Scanner template
Youzify < 1.2.0 - Unauthenticated SQLi
The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
-
Unscored —CVE-2022-1906 Scanner template
Copyright Proof <= 4.16 - Reflected Cross-Site-Scripting
The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific sett…