CyberSecBulletin

Createplugin vulnerabilities

We track 1 vulnerability in Createplugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2022.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Createplugin vulnerabilities

  • 8.8 High severity

    WPMK Ajax Finder: Cross-Site Request Forgery

    CVE-2022-1749Createplugin

    The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbit