Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: CodeSolz Component: Better Find And Replace Clear all filters
TI-2022-01346 CVE-2022-1472 · GHSA-g8rq-2pr5-2p4w

Better Find and Replace < 1.3.6 - Admin+ SQLi

Priority LOW 34

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01255 Published 2022-06-20 Fixed in 1.3.6 CWE-89
TI-2021-06958 CVE-2021-24676 · GHSA-m7m9-qjr8-mch7

Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

Priority LOW 29

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-10-04 Fixed in 1.2.9 CWE-79