CVE-2024-13726

The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2024-13726: Improper Neutralization of Special Elements used in an SQL Command

The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

PT-2025-6603

Name of the Vulnerable Software and Affected Versions Coder WordPress plugin versions 1.3.4 and earlier Description The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users,...

PT-2022-9609

Name of the Vulnerable Software and Affected Versions WP Coder WordPress plugin versions prior to 2.5.2 Description The issue allows for the inclusion of arbitrary files with PHP extension, as well as files using data:// or http:// protocols, within the wow-company admin menu page. This can lead ...