Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-3769

OWM Weather < 5.6.9 - Contributor+ SQLi

The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Ujsoftware
Products
Owm Weather
CVE-2022-47179

WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ujsoftware
Products
Owm Weather