CVE-2023-52131

CVE-2023-52131 is an authenticated SQL injection affecting the WordPress plugin Page Generator (WP Page Generator). The vulnerability is described as an authenticated (Administrator+) SQL injection in Page Generator versions up to 1.7.1. The issue is publicly tracked with a patch status of Patche...

CVE-2022-2100

The CVE-2022-2100 entry concerns the WordPress Page Generator plugin (versions before 1.6.5). Affected component: plugin settings sanitization/escaping, which lets high-privilege users (e.g., admin) trigger cross-site scripting. Root cause: failure to sanitize/escape settings. Impact: stored XSS ...