Security Vulnerabilities - CVEs Published In 2022
Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.
CVSS Score
5.4
EPSS Score
0.007
Published
2022-11-18
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.
CVSS Score
7.2
EPSS Score
0.008
Published
2022-11-18
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.
CVSS Score
7.2
EPSS Score
0.009
Published
2022-11-18
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.
CVSS Score
7.2
EPSS Score
0.008
Published
2022-11-18
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.
CVSS Score
7.2
EPSS Score
0.009
Published
2022-11-18
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.
CVSS Score
4.8
EPSS Score
0.004
Published
2022-11-18
Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
CVSS Score
4.3
EPSS Score
0.005
Published
2022-11-18
Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-11-18
Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress.
CVSS Score
5.4
EPSS Score
0.002
Published
2022-11-18
Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.
CVSS Score
7.5
EPSS Score
0.055
Published
2022-11-18