Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:find_and_replace_all:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductFind And Replace All (f59ea1a7-72cd-57fb-8257-1eedd143201d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3850 vulnerable 2026-06-08 05:48:22.462267 Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF
The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack
Published: 2022-11-28T13:47:12.088Z
Updated: 2025-04-25T15:00:33.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2311 vulnerable 2026-06-08 05:43:35.281142 Find and Replace All < 1.3 - Reflected Cross Site Scripting
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.
Published: 2022-11-28T13:47:13.639Z
Updated: 2025-04-23T16:34:07.627Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.