Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Cloudways Component: Breeze Clear all filters
TI-2022-11914 CVE-2022-29444 · GHSA-qm2w-68c6-wxv5

WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

Priority LOW 30

Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00571 Published 2022-05-02 No fix listed CWE-264