CVE-2023-50845

CVE-2023-50845 concerns the GeoDirectory WordPress plugins (GeoDirectory – WordPress Business Directory Plugin; Classified Directory) from AyeCode. Connected Red Hat entry confirms the issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting GeoDi...

CVE-2022-47442

Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9...

CVE-2022-47442

CVE-2022-47442 affects the WordPress UsersWP plugin (versions

WordPress WP User Frontend plugin <= 3.5.28 - Obscure Registration as Admin vulnerability

Obscure Registration as Admin vulnerability discovered by AyeCode Ltd in WordPress WP User Frontend plugin versions = 3.5.28. Solution Update the WordPress WP User Frontend plugin to the latest available version at least 3.5.29...

WordPress RegistrationMagic plugin <= 5.0.1.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by AyeCode Ltd in WordPress RegistrationMagic plugin versions = 5.0.1.8. Solution Update the WordPress RegistrationMagic plugin to the latest available version at least 5.0.1.9...

WordPress Pie Register plugin <= 3.7.1.5 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by AyeCode Ltd in WordPress Pie Register plugin versions = 3.7.1.5. Solution Update the WordPress Pie Register plugin to the latest available version at least 3.7.1.6...