Read the docs

Wpmk Ajax Finder Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpmk Ajax Finder Project records in CISA KEV

No Wpmk Ajax Finder Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpmk Ajax Finder 1 record HIGH

Records

1 record

TI-2022-01615 CVE-2022-1749 · GHSA-8m25-j5jf-5mj2

WPMK Ajax Finder <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting

Priority HIGH 73

The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce chec…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00802 Published 2022-06-13 No fix listed CWE-352
Open these records in search →