Browse CVEs

HIGH 8.8 CVE-2022-38454 Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress. Kraken.io Image Optimizer after 2.6.5 Fix from $1,9502022-09-23 MEDIUM 6.1 CVE-2022-36417 Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in 3D Tag Cloud plugin <= 3.8 at WordPress. 3d Tag Cloud after 3.8 Fix from $1,6002022-09-23 HIGH 8.8 CVE-2022-38470 Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress. Customer Reviews For Woocommerce after 5.3.5 Fix from $1,9502022-09-23 HIGH 8.8 CVE-2022-36388 Cross-Site Request Forgery (CSRF) vulnerability in YDS Support Ticket System plugin <= 1.0 at WordPress. Yds Support Ticket System after 1.0 Fix from $1,9502022-09-23 HIGH 8.8 CVE-2022-38085 Cross-Site Request Forgery (CSRF) vulnerability in Read more By Adam plugin <= 1.1.8 at WordPress. Read More By Adam after 1.1.8 Fix from $1,9502022-09-23 HIGH 8.8 CVE-2022-36798 Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.7 at WordPress. Mega Addons For Wpbakery Page Builder after 4.2.7 Fix from $1,9502022-09-23 HIGH 8.8 CVE-2022-41245 A cross-site request forgery (CSRF) vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to … Worksoft Execution Manager after 10.0.3.503 Fix from $1,9502022-09-21 HIGH 8.8 CVE-2022-41249 A cross-site request forgery (CSRF) vulnerability in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers to connect to an attacker-specifi… Scm Httpclient after 1.5 Fix from $1,9502022-09-21 HIGH 8.8 CVE-2022-41253 A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-specified HT… Cons3rt after 1.0.0 Fix from $1,9502022-09-21 HIGH 8.8 CVE-2022-41227 A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to… Ns Nd Integration Performance Publisher 4.8.0.130+ Fix from $1,9502022-09-21 HIGH 8.0 CVE-2022-41232 A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file … Build Publisher after 1.22 Fix from $1,9502022-09-21 HIGH 8.8 CVE-2022-41236 A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to replace the … Security Inspector after 117.v6eecc36919c2 Fix from $1,9502022-09-21 HIGH 8.8 CVE-2022-23685 A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Fo… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-35196 TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. Testlink No fix yet Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-3221 Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. Rdiffweb 2.4.3+ Fix from $1,9502022-09-15 HIGH 8.8 CVE-2022-40623 The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issu… Wn531g3 Firmware No fix yet Fix from $1,9502022-09-13 HIGH 8.8 CVE-2022-32555 Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, … Data Exchange Management Studio Mitigation only Fix from $1,9502022-09-13 HIGH 8.8 CVE-2022-38139 Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in RD Station plugin <= 5.2.0 at WordPress. Rd Station after 5.2.0 Fix from $1,9502022-09-13 HIGH 8.8 CVE-2022-38093 Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress. All In One Seo after 4.2.3.1 Fix from $1,9502022-09-09 HIGH 8.8 CVE-2022-38144 Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress. Wpforo Forum after 2.0.5 Fix from $1,9502022-09-09 HIGH 8.8 CVE-2022-37405 Cross-Site Request Forgery (CSRF) vulnerability in Mickey Kay's Better Font Awesome plugin <= 2.0.1 at WordPress. Better Font Awesome after 2.0.1 Fix from $1,9502022-09-09 HIGH 8.8 CVE-2022-37411 Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza's Captcha Code plugin <= 2.7 at WordPress. Captcha Code after 2.7 Fix from $1,9502022-09-09 HIGH 8.0 CVE-2022-38059 Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress. Access Code Feeder after 1.0.3 Fix from $1,9502022-09-09 HIGH 8.8 CVE-2022-35277 Cross-Site Request Forgery (CSRF) vulnerability in GetResponse plugin <= 5.5.20 at WordPress. Getresponse after 5.5.20 Fix from $1,9502022-09-09 HIGH 8.8 CVE-2022-37730 In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to c… Ftcms No fix yet Fix from $1,9502022-09-07 MEDIUM 6.1 CVE-2022-2518 The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. Thi… Stockists Manager For Woocommerce after 1.0.2.1 Fix from $1,6002022-09-06 HIGH 8.8 CVE-2022-2540 The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4… Link Optimizer Lite after 1.4.5 Fix from $1,9502022-09-06 HIGH 8.8 CVE-2022-2541 The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9… Ucontext For Amazon after 3.9.1 Fix from $1,9502022-09-06 HIGH 8.8 CVE-2022-2542 The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including … Ucontext For Clickbank after 3.9.1 Fix from $1,9502022-09-06 HIGH 8.8 CVE-2022-2233 The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce… Banner Cycler after 1.4 Fix from $1,9502022-09-06