13 matches found
EUVD-2021-31584
Malicious code in bioql PyPI...
Malicious code in elderberry-gwa-project (npm)
The package elderberry-gwa-project was found to contain malicious code...
MAL-2025-19338 Malicious code in elderberry-gwa-project (npm)
The package elderberry-gwa-project was found to contain malicious code...
CGA-WFQP-8X3Q-4GWJ
Bulletin has no description...
CVE-2021-44779
Unauthenticated SQL Injection SQLi vulnerability discovered in GWA AutoResponder WordPress plugin versions = 2.3, vulnerable at &listid. No patched version available, plugin closed...
CVE-2021-44779
Unauthenticated SQL Injection SQLi vulnerability discovered in GWA AutoResponder WordPress plugin versions = 2.3, vulnerable at &listid. No patched version available, plugin closed...
Sql injection
Unauthenticated SQL Injection SQLi vulnerability discovered in GWA AutoResponder WordPress plugin versions = 2.3, vulnerable at &listid. No patched version available, plugin closed...
CVE-2021-44779
CVE-2021-44779 affects the WordPress plugin GWA AutoResponder (versions
CVE-2021-44779: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection SQLi vulnerability discovered in GWA AutoResponder WordPress plugin versions = 2.3, vulnerable at &listid. No patched version available, plugin closed...
PT-2022-12231
Name of the Vulnerable Software and Affected Versions GWA AutoResponder WordPress plugin versions prior to 2.4 Description An unauthenticated SQL Injection vulnerability was discovered in the GWA AutoResponder WordPress plugin. The issue is related to the &listid parameter. There is no informatio...
WordPress [GWA] AutoResponder <= 2.3 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) at &Subject
Cross-Site Request Forgery CSRF leading to Persistent Cross-Site Scripting XSS at &Subject discovered by m0ze Patchstack in WordPress GWA AutoResponder versions = 2.3. Solution Deactivate and delete. This plugin has been closed as of August 30, 2019 and is not available for download. Reason:...
WordPress [GWA] AutoResponder plugin <= 2.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities discovered by m0ze Patchstack in WordPress GWA AutoResponder plugin versions = 2.3. Solution Deactivate and delete. This plugin has been closed as of August 30, 2019 and is not available for download. Reason: Guideline Violation...
gwa-group.com Cross Site Scripting vulnerability OBB-1385419
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...