Read the docs

Adivaha

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Adivaha records in CISA KEV

No Adivaha vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2023-30632 CVE-2023-54359 · GHSA-4hfq-67c2-xq9j

WordPress adivaha Travel Plugin 2.3 SQL Injection via pid

Priority HIGH 77

WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pid' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0028 Published 2026-04-09 No fix listed CWE-89
TI-2023-30631 CVE-2023-54358 · GHSA-46qr-c6wf-gmhj

WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile

Priority LOW 23

WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the isMobile parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00273 Published 2026-04-09 No fix listed CWE-79
Open these records in search →