Skip to content

CyberSecBulletin

CVEs published on February 21, 2022

7 vulnerabilities, ordered with the most urgent first.

7.8 High severity
Planning Analytics: Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-22308Feb 21, 2022IBM
9.8 Critical severity
Zfaka: Unrestricted Upload of File with Dangerous Type
CVE-2022-24553Feb 21, 2022Zfaka ProjectEPSS 2.69%
8.8 High severity
drogonframework/drogon: Files or Directories Accessible to External Parties
CVE-2022-25297Feb 21, 2022Drogonframework/drogonEPSS 1.65%
8.8 High severity
AnyComment: Cross-Site Request Forgery
CVE-2022-0134Feb 21, 2022AnyComment
8.8 High severity
WP Content Copy Protection & No Right Click…: Cross-Site Request Forgery
CVE-2022-23983Feb 21, 2022Wp-buy
7.2 High severity
Popup Builder – Create highly converting…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-0228Feb 21, 2022Popup Builder – Create highly converting, mobile friendly marketing popups.EPSS 5.26%
7.2 High severity
Database Backup for WordPress: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-0255Feb 21, 2022Database Backup for WordPressEPSS 1.31%