Ujsoftware Owm Weather — known CVE vulnerabilities

Every CVE whose affected-product data names Ujsoftware Owm Weather, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-3769 — CVSS 8.8 (high): The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading…
• CVE-2022-47179 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft.