Sign in Free assessment

datainterlock records

4 published records for vendor datainterlock.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

19
22

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-18548No exploit	The note-press plugin before 0.1.2 for WordPress has SQL injection.datainterlock · note press · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.8%	Aug 16, 2019
10Monitor	CVE-2022-1688No exploit	Note Press <= 0.1.10 - Admin+ SQLi via iddatainterlock · note press · CWE-89 SQL injection	Low2.7	—	0.8%	Jun 8, 2022
10Monitor	CVE-2022-1689No exploit	Note Press <= 0.1.10 - Admin+ SQLi via Updatedatainterlock · note press · CWE-89 SQL injection	Low2.7	—	0.8%	Jun 8, 2022
10Monitor	CVE-2022-1690No exploit	Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actionsdatainterlock · note press · CWE-89 SQL injection	Low2.7	—	0.8%	Jun 8, 2022

CVE-2017-18548
40Plan
The note-press plugin before 0.1.2 for WordPress has SQL injection.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- SQL injection
datainterlock · note pressAug 16, 2019
CVE-2022-1688
10Monitor
Note Press <= 0.1.10 - Admin+ SQLi via id
LowCVSS 2.7No exploitEPSS 1%
- SQL injection
datainterlock · note pressJun 8, 2022
CVE-2022-1689
10Monitor
Note Press <= 0.1.10 - Admin+ SQLi via Update
LowCVSS 2.7No exploitEPSS 1%
- SQL injection
datainterlock · note pressJun 8, 2022
CVE-2022-1690
10Monitor
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
LowCVSS 2.7No exploitEPSS 1%
- SQL injection
datainterlock · note pressJun 8, 2022