Carlos Doral Mantenimiento web (WordPress plugin)

• CVE-2022-38075 Medium 6.1 WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) 0.2%
• CVE-2022-41980 Medium 4.8 WordPress Mantenimiento web plugin <= 0.13 - Auth. Cross-Site Scripting (XSS) vulnerability 0.6%