← All credits
Vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance)
8 vulnerability records and advisories credit this contributor.
CVE-2022-41615
WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-40671
WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-40310
WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability
CVE-2022-40130
WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability
CVE-2022-38067
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
CVE-2022-36422
WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition
CVE-2022-36394
WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability
CVE-2022-29424
WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability