WP Cerber Security, Anti-spam & Malware Scan

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-0429	WordPress WP Cerber Security, Anti-spam & Malware Scan	Med	0.40	6.1	0.01		Mar 7, 2022	The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.
CVE-2022-4417	WordPress WP Cerber Security, Anti-spam & Malware Scan	Med	0.35	5.3	0.01		Jan 2, 2023	The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users

CVE-2022-0429MedMar 7, 2022
WordPress
WP Cerber Security, Anti-spam & Malware Scan
risk 0.40cvss 6.1epss 0.01
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.
CVE-2022-4417MedJan 2, 2023
WordPress
WP Cerber Security, Anti-spam & Malware Scan
risk 0.35cvss 5.3epss 0.01
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users