Codesolz

Better Find And Replace

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-9334

  • EPSS 0.1%
  • Veröffentlicht 08.11.2025 05:52:43
  • Zuletzt bearbeitet 12.11.2025 16:19:59

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7. This is due to insufficient input validation and restriction on the 'rtafar_ajax' function....

4.3

CVE-2025-12360

  • EPSS 0.04%
  • Veröffentlicht 06.11.2025 07:27:05
  • Zuletzt bearbeitet 06.11.2025 19:45:09

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafar_ajax() function in all versions up to, and including, 1.7.7. This makes it possible for ...

5.9

CVE-2025-53466

  • EPSS 0.03%
  • Veröffentlicht 22.09.2025 19:15:43
  • Zuletzt bearbeitet 22.09.2025 21:22:33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Better Find and Replace allows Stored XSS. This issue affects Better Find and Replace: from n/a through 1.7.6.

8.8

CVE-2025-24734

  • EPSS 0.16%
  • Veröffentlicht 27.01.2025 15:15:16
  • Zuletzt bearbeitet 27.01.2025 15:15:16

Missing Authorization vulnerability in CodeSolz Better Find and Replace allows Privilege Escalation. This issue affects Better Find and Replace: from n/a through 1.6.7.

8.3

CVE-2024-39636

  • EPSS 1.3%
  • Veröffentlicht 01.08.2024 22:15:25
  • Zuletzt bearbeitet 02.08.2024 12:59:43

Deserialization of Untrusted Data vulnerability in CodeSolz Better Find and Replace.This issue affects Better Find and Replace: from n/a through 1.6.1.

7.2

CVE-2022-1472

Exploit
  • EPSS 0.57%
  • Veröffentlicht 20.06.2022 11:15:09
  • Zuletzt bearbeitet 21.11.2024 06:40:47

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

6.1

CVE-2021-24676

Exploit
  • EPSS 0.21%
  • Veröffentlicht 04.10.2021 12:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:32

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue