Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: anmari Component: Amr Users Clear all filters
TI-2022-22314 CVE-2022-45348 · GHSA-7wqv-9w75-qfxv

WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection

Priority MEDIUM 42

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00812 Published 2023-11-07 No fix listed CWE-1236
TI-2022-00989 CVE-2022-1094 · GHSA-27cc-h22h-f622

Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00615 Published 2022-04-25 Fixed in 4.59.4 CWE-79