Participants Database Security Vulnerabilities and Issues — Participants Database CVE List

Lucene search

XnauParticipants Database

6 matches found

CVE•added 2020/02/11 12:15 p.m.•64 views

CVE-2020-8596

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are ...

7.5CVSS7.9AI score0.01311EPSS

CVE•added 2023/12/19 12:15 a.m.•54 views

CVE-2023-48751

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5.

8.8CVSS6.3AI score0.00063EPSS

CVE•added 2017/09/04 8:29 p.m.•52 views

CVE-2017-14126

The Participants Database plugin before 1.7.5.10 for WordPress has XSS.

6.1CVSS6.2AI score0.0239EPSS

CVE•added 2014/06/04 2:55 p.m.•43 views

CVE-2014-3961

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/.

7.5CVSS8.7AI score0.08518EPSS

CVE•added 2023/02/28 3:15 p.m.•36 views

CVE-2022-47612

Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin

4.3CVSS4.7AI score0.00067EPSS

CVE•added 2023/11/09 11:15 p.m.•24 views

CVE-2023-31235

Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin

8.8CVSS8.9AI score0.00096EPSS