Read the docs

Find And Replace All Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Find And Replace All Project records in CISA KEV

No Find And Replace All Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Find And Replace All 2 records MEDIUM

Records

2 records in Find And Replace All · all components

TI-2022-02134 CVE-2022-2311 · GHSA-vmxx-9r5c-688g

Find and Replace All < 1.3 - Reflected Cross Site Scripting

Priority MEDIUM 60

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00529 Published 2022-11-28 Fixed in 1.3
TI-2022-03530 CVE-2022-3850 · GHSA-2qpw-jpx2-w9hr

Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF

Priority MEDIUM 53

The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0029 Published 2022-11-28 Fixed in 1.3
Open these records in search →