CVE-2024-12595

The AHAthat Plugin for WordPress (versions 1.6 and prior ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is a failure to escape the $_SERVER['REQUEST_URI'] parameter before it is outputted back into an attribute. This allows an attacker to execute malicious scripts in the...

CVE-2024-11269

The AHAthat Plugin for WordPress (versions 1.6 and earlier ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter before using it in a SQL statement. This flaw allows an Admin user to perform SQL injection attacks. Remediation involves updating the plugin to...