Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:better_find_and_replace:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductBetter Find And Replace (64dc9773-cc2d-5547-894e-cd406f343379)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1472 vulnerable 2026-06-08 05:39:13.289062 Better Find and Replace < 1.3.6 - Admin+ SQLi
The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection
Published: 2022-06-20T10:25:49.000Z
Updated: 2024-08-03T00:03:06.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24676 vulnerable 2026-06-08 05:30:38.988461 Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting
The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
Published: 2021-10-04T11:20:20.000Z
Updated: 2024-08-03T19:42:16.023Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.