Lucene search
+L
WpwaveHide My Wp

3 matches found

CVE
CVE
added 2023/02/06 7:59 p.m.103 views

CVE-2022-4681

The CVE-2022-4681 entry concerns the WordPress plugin Hide My WP (versions before 6.2.9). A parameter is not properly sanitized/escaped before being used in an SQL statement via an unauthenticated AJAX action, enabling a SQL injection. Impact is high (CVE scores show CRITICAL, AV:N/AC:L/PR:N/UI:N...

9.8CVSS9.8AI score0.03824EPSS
Save
CVE
CVE
added 2021/11/24 4:29 p.m.54 views

CVE-2021-36916

CVE-2021-36916 : WordPress Hide My WP premium plugin

9.8CVSS9.5AI score0.01802EPSS
Save
CVE
CVE
added 2021/11/24 4:19 p.m.54 views

CVE-2021-36917

CVE-2021-36917 affects the WordPress Hide My WP premium plugin (versions ≤ 6.2.3). The vulnerability allows an unauthenticated user to deactivate the plugin by abusing a reset token that can be retrieved and used to disable it. Impact stated in multiple sources centers on unauthorized deactivatio...

7.5CVSS6.9AI score0.01941EPSS
Save