GCVE - cpe:2.3:a:kusbandono:freemind_wp

Approved changes feed: RSS · Atom

cpe:2.3:a:kusbandono:freemind_wp_browser:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kusbandono (`193e3292-a0ce-58b2-a822-66c3e97781a7`)
Product	Freemind Wp Browser (`efb371d4-7885-5f3b-8a47-b7ad92e2ee07`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2443`	vulnerable	2026-06-08 05:43:35.559973	FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting HIGH (8.8) The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions() function found in the ~/freemind-wp-browser.php file. This makes it possible for unauthenticated attackers to inject malicious web scripts into the page, granted they can trick a site's administrator into performing an action such as clicking on a link. Published: 2022-07-18T16:18:38.000Z Updated: 2026-04-08T17:21:04.137Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/c5f3e34d-07fb-4e49-a4e2-f8e92301b35e?source=cve https://plugins.trac.wordpress.org/browser/freemind-wp-browser/trunk/freemind-wp-browser.php#L104 https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2443	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.