Read the docs

learningtimes

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

learningtimes records in CISA KEV

No learningtimes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Badgeos 6 records MEDIUM Badgos 1 record MEDIUM

Records

1 record in Badgos · all components

TI-2022-02733 CVE-2022-2958 · GHSA-7hvp-684m-pr7g

BadgeOS < 3.7.1.3 - Subscriber+ SQLi

Priority MEDIUM 41

The BadgeOS WordPress plugin before 3.7.1.3 does not sanitise and escape parameters before using them in SQL statements via AJAX actions available to any authenticated users, leading to SQL Injections

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01317 Published 2022-09-19 Fixed in 3.7.1.3 CWE-89
Open these records in search →