3 matches found
CVE-2022-2864
Summary: CVE-2022-2864 concerns the WordPress plugin “Demon Image Annotation” (versions
CVE-2023-40215
CVE-2023-40215 refers to a WordPress plugin vulnerability in the Demon image annotation plugin (demon-image-annotation). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting versions listed as n/a through 5.1. Public sources corroborate th...
CVE-2022-4171
The CVE-2022-4171 entry concerns the demon image annotation plugin for WordPress, affected through versions up to and including 5.0. The root cause is improper input validation of the number of characters in an annotation, ignoring an existing setting intended to limit input length. This allows u...