Read the docs

Ajexperience

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ajexperience records in CISA KEV

No Ajexperience vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
404 Solution 4 records HIGH

Records

4 records

TI-2024-00989 CVE-2024-1068 · GHSA-jjxf-7hh9-8j8m

404 Solution < 2.35.8 - Admin+ SQL Injection

Priority HIGH 67

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00756 Published 2024-03-11 Fixed in 2.35.8 CWE-89
TI-2023-27753 CVE-2023-50848 · GHSA-gm9h-hh76-w62w

WordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aaron J 404 Solution.This issue affects 404 Solution: from n/a through 2.34.0.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2023-12-28 No fix listed CWE-89
TI-2024-10447 CVE-2024-11277 · GHSA-8w9g-r3q7-57v4

404 Solution <= 2.35.19 - Reflected Cross-Site Scripting

Priority LOW 27

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-11-20 No fix listed CWE-79
Open these records in search →