Find And Replace All Project Find And Replace All
2 CVEs affecting Find And Replace All Project Find And Replace All. Latest disclosed: 2022-11-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2311 | Medium | 6.1 | 2022-11-28 | The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user… |
CVE-2022-3850 | Medium | 4.3 | 2022-11-28 | The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace… |