PatchTheCVEwebence vulnerabilities
Recent CVEs affecting webence products. 4 tracked.
webence has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-11-19. Highest priority: CVE-2022-1762 (score 54/100).
- CVE-2022-41155 MEDIUM 5.3 UPGRADE Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
- CVE-2022-1762 HIGH 7.5 UPGRADE The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate
- CVE-2022-0246 MEDIUM 4.9 UPGRADE The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its back
- CVE-2021-36873 MEDIUM 5.5 UPGRADE Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versio
FAQ
How do I fix webence vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webence being exploited right now?
None of the tracked webence CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webence CVE should I patch first?
CVE-2022-1762 currently ranks highest (54/100): The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate.