{"vulnerability": "CVE-2022-24272", "sightings": [{"uuid": "969dd936-575e-45af-8b34-c9fe47944562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24272", "type": "seen", "source": "https://t.me/cibsecurity/41219", "content": "\u203c CVE-2022-24272 \u203c\n\nAn authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-21T14:26:35.000000Z"}, {"uuid": "95f1a6f9-2ee2-4f1a-a906-20b2358b29c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24272", "type": "seen", "source": "https://t.me/hacking_Attack/42814", "content": "Exploit Collector\nWordPress International SMS For Contact Form 7 Integration 1.2 CSRF\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress International SMS for Contact Form 7 Integration plugin version 1.2 suffers from a cross site request forgery vulnerability.\n\nMD5 | 3bdeefa3f49313e66ab472b8a9a22a45\n\nDownload\n\n# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross-Site Request Forgery (CSRF)\n\n# Date: 2022-02-09\n\n# Author: Milad Karimi \n\n# Software Link: https://wordpress.org/plugins/cf7-international-sms-integration/\n\n# Version: 1.2\n\n# Tested on: Windows 11\n\n# CVE: CVE-2022-24272\n1. Description:\n\nThe plugin International Sms For Contact Form 7 Integration for class-sms-log-display.php and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. \n\nDue to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue\n2. Proof of Concept:\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:55.985814Z"}, {"uuid": "23c20e15-7cda-4a91-b528-9d8951de7c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24272", "type": "seen", "source": "https://t.me/hacking_Attack/42814", "content": "Exploit Collector\nWordPress International SMS For Contact Form 7 Integration 1.2 CSRF\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress International SMS for Contact Form 7 Integration plugin version 1.2 suffers from a cross site request forgery vulnerability.\n\nMD5 | 3bdeefa3f49313e66ab472b8a9a22a45\n\nDownload\n\n# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross-Site Request Forgery (CSRF)\n\n# Date: 2022-02-09\n\n# Author: Milad Karimi \n\n# Software Link: https://wordpress.org/plugins/cf7-international-sms-integration/\n\n# Version: 1.2\n\n# Tested on: Windows 11\n\n# CVE: CVE-2022-24272\n1. Description:\n\nThe plugin International Sms For Contact Form 7 Integration for class-sms-log-display.php and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. \n\nDue to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue\n2. Proof of Concept:\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:15.753535Z"}, {"uuid": "181a6041-8fa4-4091-a6a9-afe8287b4c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24272", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42814", "content": "Exploit Collector\nWordPress International SMS For Contact Form 7 Integration 1.2 CSRF\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress International SMS for Contact Form 7 Integration plugin version 1.2 suffers from a cross site request forgery vulnerability.\n\nMD5 | 3bdeefa3f49313e66ab472b8a9a22a45\n\nDownload\n\n# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross-Site Request Forgery (CSRF)\n\n# Date: 2022-02-09\n\n# Author: Milad Karimi \n\n# Software Link: https://wordpress.org/plugins/cf7-international-sms-integration/\n\n# Version: 1.2\n\n# Tested on: Windows 11\n\n# CVE: CVE-2022-24272\n1. Description:\n\nThe plugin International Sms For Contact Form 7 Integration for class-sms-log-display.php and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. \n\nDue to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue\n2. Proof of Concept:\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T08:00:06.590120Z"}, {"uuid": "bce87cca-6fc7-4461-979b-59007892a786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24272", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42814", "content": "Exploit Collector\nWordPress International SMS For Contact Form 7 Integration 1.2 CSRF\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nWordPress International SMS for Contact Form 7 Integration plugin version 1.2 suffers from a cross site request forgery vulnerability.\n\nMD5 | 3bdeefa3f49313e66ab472b8a9a22a45\n\nDownload\n\n# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross-Site Request Forgery (CSRF)\n\n# Date: 2022-02-09\n\n# Author: Milad Karimi \n\n# Software Link: https://wordpress.org/plugins/cf7-international-sms-integration/\n\n# Version: 1.2\n\n# Tested on: Windows 11\n\n# CVE: CVE-2022-24272\n1. Description:\n\nThe plugin International Sms For Contact Form 7 Integration for class-sms-log-display.php and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. \n\nDue to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue\n2. Proof of Concept:\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:28.443498Z"}]}