CVE-2023-0381

The CVE-2023-0381 issue affects the GigPress WordPress plugin

CVE-2023-7233

CVE-2023-7233 affects the GigPress WordPress plugin up to version 2.3.29. Affected component: plugin settings not sanitised/escaped, enabling Stored Cross-Site Scripting by high-privilege users (e.g., Administrators) even when unfiltered_html is disallowed (multisite scenarios). Documented detail...

CVE-2022-4759

CVE-2022-4759 affects the GigPress WordPress plugin version prior to 2.3.28. The issue is that certain shortcode attributes are not properly validated or escaped before being echoed in a page/post, enabling a Stored XSS where an attacker with the contributor role or higher could inject malicious ...

CVE-2015-4066

CVE-2015-4066 affects the WordPress GigPress plugin (prior to version 2.3.9). The vulnerability is an SQL injection in admin/handlers.php triggered by the show_artist_id/show_venue_id parameters in an add action within gigpress.php, allowing remote authenticated users to execute arbitrary SQL com...

CVE-2015-9353

Affected software: WordPress GigPress plugin (before 2.3.11). Vulnerability: SQL injection in the admin area. Root cause: Improper handling of input in admin/handlers.php via the show_artist_id or show_venue_id parameters in an add action (gigpress.php) to wp-admin/admin.php. Impact: Remote authe...

CVE-2015-9354

CVE-2015-9354 concerns the WordPress plugin GigPress. The vulnerability is a cross-site scripting (XSS) flaw in GigPress up to version 2.3.11 (i.e., affected when using versions before 2.3.11). The underlying issue is a client-side script injection vulnerability within the plugin, enabling likely...