Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-2887

WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting

The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Acnam
Products
Wp Server Health Stats
CVE-2022-0191

Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Acnam
Products
Ad Invalid Click Protector
CVE-2022-0190

Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Acnam
Products
Ad Invalid Click Protector