2 matches found
CVE-2022-40694
CVE-2022-40694 affects WordPress via the News Announcement Scroll plugin (versions
CVE-2023-5663
CVE-2023-5663 - News Announcement Scroll (WordPress) is a SQL Injection in the plugin before and including version 9.0.0. Root cause: insufficient escaping of the user-supplied shortcode parameter and inadequate preparation of the SQL query, enabling an authenticated attacker (contributor level o...