CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-42461MEDIUM | WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerabilityBroken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. CWE-264Nov 18, 2022 | CVSS5.4v3.1 | EPSS0.636% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |