52 matches found
CVE-2024-13713 WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
CVE-2024-13713
CVE-2024-13713 : WPExperts Square For GiveWP plugin for WordPress has an SQL Injection via the post parameter in all versions up to 1.3.1. Exploitation requires Subscriber+ or higher authentication; attacker can append SQL to existing queries to access data. The connected Wordfence entry lists th...
WordPress plugin WPExperts Square For GiveWP SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...
CVE-2025-22736
Incorrect Privilege Assignment vulnerability in Saad Iqbal User Management user-management allows Privilege Escalation.This issue affects User Management: from n/a through = 1.2...
CVE-2024-52403
Unrestricted Upload of File with Dangerous Type vulnerability in Saad Iqbal User Management user-management allows Upload a Web Shell to a Web Server.This issue affects User Management: from n/a through = 1.1...
CVE-2024-31297
Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0...
CVE-2025-22736
Incorrect Privilege Assignment vulnerability in Saad Iqbal User Management user-management allows Privilege Escalation.This issue affects User Management: from n/a through = 1.2...
CVE-2025-22736 WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in WPExperts User Management allows Privilege Escalation.This issue affects User Management: from n/a through 1.2...
CVE-2025-22736 WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Saad Iqbal User Management user-management allows Privilege Escalation.This issue affects User Management: from n/a through = 1.2...
WordPress Post SMTP Plugin <= 2.9.9 is vulnerable to SQL Injection
Software Post SMTP Type Plugin Vulnerable versions = 2.9.9 Fixed in 2.9.10 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52436 Patch priority Low CVSS severity Low 7.6 Developer WPExperts PSID d90cd284edab Credits Hakiduck Required privilege Administrator Published 15...
CVE-2024-47338
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through = 1.3...
CVE-2024-47338 WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPExpertsio WPExperts Square For GiveWP allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through 1.3...
CVE-2024-47338 WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through = 1.3...
CVE-2024-47338
CVE-2024-47338 concerns WPExperts Square For GiveWP plugin versions
PT-2024-32552 · Wpexperts · Wpexperts Square For Givewp
Name of the Vulnerable Software and Affected Versions: WPExperts Square For GiveWP versions 1.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
WordPress WPExperts Square For GiveWP Plugin <= 1.3 is vulnerable to SQL Injection
Software WPExperts Square For GiveWP Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47338 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 5f874d4bcf27 Credits Jorge Diaz ddiax Required privilege...
WordPress Post SMTP Plugin <= 2.9.3 is vulnerable to SQL Injection
Software Post SMTP Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-5207 Patch priority Low CVSS severity Low 7.6 Developer WPExperts PSID ff0923d41368 Credits Le Ngoc Anh Required privilege Administrator Published 30 May,...
CVE-2024-31297
Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0...
CVE-2024-31297
CVE-2024-31297 affects Wholesale For WooCommerce (WooCommerce Wholesale Pricing) up to v2.3.0. A Missing Authorization vulnerability allows unauthenticated users to perform Unauthenticated Arbitrary Post Deletion, enabling data loss via unauthorized post deletions. The incident is associated with...