CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2021-39200 – Information Disclosure in wp_die() via JSONP in wordpress
https://notcve.org/view.php?id=CVE-2021-39200
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions output data of the function wp_die() can be leaked under certain conditions, which can include data like nonces. It can then be used to perform actions on your behalf. This has been patched in WordPress 5.8.1, along with any older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix. • https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-m9hc-7v5q-x8q5 https://hackerone.com/reports/1142140 https://www.debian.org/security/2021/dsa-4985 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.0EPSS: 92%CPEs: 6EXPL: 13CVE-2022-21661 – SQL injection in WordPress
https://notcve.org/view.php?id=CVE-2022-21661
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. • https://www.exploit-db.com/exploits/50663 https://github.com/z92g/CVE-2022-21661 https://github.com/0x4E0x650x6F/Wordpress-cve-CVE-2022-21661 https://github.com/safe3s/CVE-2022-21661 https://github.com/purple-WL/wordpress-CVE-2022-21661 https://github.com/guestzz/CVE-2022-21661 https://github.com/TAPESH-TEAM/CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection https://github.com/WellingtonEspindula/SSI-CVE-2022-21661 https://github.com/sealldeveloper/CVE-2022-21661-PoC& • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •