3 matches found
CVE-2022-4681
The CVE-2022-4681 entry concerns the WordPress plugin Hide My WP (versions before 6.2.9). A parameter is not properly sanitized/escaped before being used in an SQL statement via an unauthenticated AJAX action, enabling a SQL injection. Impact is high (CVE scores show CRITICAL, AV:N/AC:L/PR:N/UI:N...
CVE-2021-36916
CVE-2021-36916 : WordPress Hide My WP premium plugin
CVE-2021-36917
CVE-2021-36917 affects the WordPress Hide My WP premium plugin (versions ≤ 6.2.3). The vulnerability allows an unauthenticated user to deactivate the plugin by abusing a reset token that can be retrieved and used to disable it. Impact stated in multiple sources centers on unauthorized deactivatio...