CVE-2015-9354

The gigpress plugin before 2.3.11 for WordPress has XSS...

CVE-2015-9353

Affected software: WordPress GigPress plugin (before 2.3.11). Vulnerability: SQL injection in the admin area. Root cause: Improper handling of input in admin/handlers.php via the show_artist_id or show_venue_id parameters in an add action (gigpress.php) to wp-admin/admin.php. Impact: Remote authe...

WordPress GigPress Plugin <= 2.3.10 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and blind SQL injection vulnerabilities. Attackers can inject arbitrary JavaScript or HTML code or execute arbitrary SQL commands. Solution Update the plugin...

CVE-2015-4066

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...

WordPress GigPress Plugin 2.3.8 - SQL Injection

This WordPress GigPress plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

Multiple SQL Injection Vulnerabilities in WordPress GigPress Plugin 'handlers.php'

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.GigPress is a real-time gig listing and management plugin for musicians and other performers. Multiple SQL injection vulnerabilities exis...