96 matches found
CVE-2024-0566
The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
CVE-2024-49687
Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...
CVE-2021-25399
Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...
PT-2025-20042 · Unknown · Smart Manager
Name of the Vulnerable Software and Affected Versions: SmartManagerCN versions prior to SMR May-2025 Release 1 Description: The issue is related to improper access control in SmartManagerCN, which allows local attackers to launch arbitrary activities with SmartManagerCN privilege. This can be...
SAMSUNG SMR 安全漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR, which stems from improper access control and could allow a local attacker to initiate arbitrary activity wi...
📄 Smart Manager 8.27.0 SQL Injection
Smart Manager version 8.27.0 suffers from a remote SQL injection vulnerability. Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...
Smart Manager 8.27.0 - Post-Authenticated SQL Injection
Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link: https://www.storeapps.org/product/smart-manager/ Version: 8.27.0 Tested on: Ubuntu 22.04 CVE: CVE-2024-0566 SQ...
CVE-2025-22710
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...
CVE-2025-22710
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...
CVE-2025-22710 WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...
CVE-2025-22710 WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...
CVE-2025-22710
CVE-2025-22710 is an SQL Injection (Improper Neutralization of Special Elements in SQL Commands) affecting StoreApps Smart Manager for WordPress, with affected range listed as Smart Manager: from n/a through 8.52.0. The CVE description specifies a Blind SQL Injection vulnerability and a CVSS v3.1...
CVE-2025-22710: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...
WordPress plugin Smart Manager SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin Smart Manager versions = 8.52.0...
PT-2025-4640
The StoreApps Smart Manager is affected by an improper neutralization of special elements used in an SQL command, also known as SQL Injection, which allows Blind SQL Injection. This issue exists in versions from unknown up to 8.52.0. An exploit for this issue is available, which can be used to...
CVE-2024-49687
Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...
CVE-2024-49687 WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...
CVE-2024-49687 WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...