CVE-2022-2864

Summary: CVE-2022-2864 concerns the WordPress plugin “Demon Image Annotation” (versions

CVE-2022-4171

The CVE-2022-4171 entry concerns the demon image annotation plugin for WordPress, affected through versions up to and including 5.0. The root cause is improper input validation of the number of characters in an annotation, ignoring an existing setting intended to limit input length. This allows u...

CVE-2023-40215

CVE-2023-40215 refers to a WordPress plugin vulnerability in the Demon image annotation plugin (demon-image-annotation). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting versions listed as n/a through 5.1. Public sources corroborate th...