3 matches found
CVE-2024-51672
CVE-2024-51672 relates to the WordPress plugin BetterLinks (WPDeveloper) up to version 2.1.7, where an SQL Injection vulnerability arises from improper neutralization of specific elements in SQL commands. The vulnerability affects BetterLinks
CVE-2023-45104
CVE-2023-45104 describes a Missing Authorization vulnerability in the WPDeveloper BetterLinks plugin, affecting versions
CVE-2021-24812
The CVE-2021-24812 entry concerns the WordPress BetterLinks plugin (versions before 1.2.6). The vulnerability arises because imported link fields are not properly sanitised/escaped, enabling Stored Cross-Site Scripting when an admin imports a malicious CSV. Public details across sources confirm t...