CVE-2022-40694

CVE-2022-40694 affects WordPress via the News Announcement Scroll plugin (versions

CVE-2023-5663

CVE-2023-5663 - News Announcement Scroll (WordPress) is a SQL Injection in the plugin before and including version 9.0.0. Root cause: insufficient escaping of the user-supplied shortcode parameter and inadequate preparation of the SQL query, enabling an authenticated attacker (contributor level o...