PT-2022-14048

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue is related to an SQL injection problem. The Note Press WordPress plugin does not properly sanitise and escape the ids from the bulk actions before using them in ...

PT-2022-14046

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue concerns a lack of sanitization and escaping of the id parameter, which is used in SQL statements via the admin dashboard. This leads to SQL injections...