zemanta

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

zemanta records in CISA KEV

No zemanta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Search Everything · all components

TI-2014-01835 CVE-2014-2316 · GHSA-6485-6vxr-f5v8

SQL injection vulnerability in se_search_default in the Search Everything plugin before…

LOW 37

SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0217 Published 2014-03-07 No fix listed CWE-89

TI-2014-03121 CVE-2014-3843 · GHSA-wgh3-j8gx-ww4f

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00952 Published 2014-05-22 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0