{"vulnerability": "cve-2022-3634", "sightings": [{"uuid": "d0e93af2-c285-4b73-9546-4d290b10f872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36340", "type": "seen", "source": "https://t.me/cibsecurity/50368", "content": "\u203c CVE-2022-36340 \u203c\n\nUnauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T22:13:42.000000Z"}, {"uuid": "3a8dfefd-dce4-4e69-9e0f-0d0cdffbf657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3634", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13867", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3634\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection\n\ud83d\udccf Published: 2022-11-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T16:26:11.192Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b5eeefb0-fb5e-4ca6-a6f0-67f4be4a2b10", "creation_timestamp": "2025-04-29T17:11:59.000000Z"}, {"uuid": "a106ae6e-86d9-4623-9b14-0dee542c3286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36343", "type": "seen", "source": "https://t.me/cibsecurity/47331", "content": "\u203c CVE-2022-36343 \u203c\n\nAuthenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-01T18:16:55.000000Z"}, {"uuid": "39f00136-70a1-43d6-ab94-7a296e104a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36346", "type": "seen", "source": "https://t.me/cibsecurity/48488", "content": "\u203c CVE-2022-36346 \u203c\n\nMultiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:20:43.000000Z"}, {"uuid": "912787a4-9e27-41f8-9d5d-6c9281b0b6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36341", "type": "seen", "source": "https://t.me/cibsecurity/48619", "content": "\u203c CVE-2022-36341 \u203c\n\nAuthenticated (subscriber+) plugin settings change leading to Stored Cross-Site Scripting (XSS) vulnerability in Akash soni's AS \u00e2\u20ac\u201c Create Pinterest Pinboard Pages plugin <= 1.0 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-23T20:27:55.000000Z"}, {"uuid": "f33163c1-4828-4d55-ba93-b26e0fcdc24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36347", "type": "seen", "source": "https://t.me/cibsecurity/48608", "content": "\u203c CVE-2022-36347 \u203c\n\nAuthenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alpine Press Alpine PhotoTile for Pinterest plugin <= 1.3.1 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-23T20:27:40.000000Z"}]}