SedLex
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Backup Scheduler (WordPress plugin) | 1 | – | Sep 23, 2022 |
| FavIcon Switcher (WordPress plugin) | 1 | – | Sep 21, 2022 |
| Image Zoom | 1 | – | Jan 17, 2024 |
| Traffic Manager | 1 | – | Jan 17, 2024 |
| Traffic Manager (WordPress plugin) | 1 | – | Nov 10, 2022 |
Exploited and recent CVEs
- CVE-2022-41695 WordPress Traffic Manager Plugin <= 1.4.5 is vulnerable to Broken Access Control 0.4%
- CVE-2022-41619 WordPress Image Zoom Plugin <= 1.8.8 is vulnerable to Broken Access Control 0.4%
- CVE-2022-42460 WordPress Traffic Manager plugin <= 1.4.5 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) 0.5%
- CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%
- CVE-2022-40219 WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%