CVE-2023-0487

CVE-2023-0487 affects the WordPress plugin My Sticky Elements . The vulnerability arises in versions prior to 2.0.9, where a parameter is not properly sanitised/escaped before being used in a SQL statement when deleting messages, enabling a SQL injection by users with high privileges (e.g., admin...

CVE-2023-3248

The CVE-2023-3248 entry concerns the All-in-one Floating Contact Form WordPress plugin prior to version 2.1.2, which does not adequately sanitise and escape certain settings. The vulnerability enables Stored Cross-Site Scripting (XSS) by an admin or other high-privileged user, even when unfiltere...