← Back

Find And Replace All

find_and_replace_all

Vendor: Find And Replace All Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-3850
1Find And Replace All Project
1Find And Replace All
Jun 17, 2026
Nov 28, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack
CVE-2022-2311
1Find And Replace All Project
1Find And Replace All
Jun 17, 2026
Nov 28, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.