Read the docs

Five Minute Webshop Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Five Minute Webshop Project records in CISA KEV

No Five Minute Webshop Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Five Minute Webshop 2 records LOW

Records

2 records

TI-2022-01553 CVE-2022-1685 · GHSA-4588-f2xw-66mq

Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby

Priority LOW 24

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01006 Published 2022-06-06 No fix listed CWE-89
TI-2022-01554 CVE-2022-1686 · GHSA-qfqw-52wp-4gvg

Five Minute Webshop <= 1.3.2 - Admin+ SQLi via id

Priority LOW 15

The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00808 Published 2022-06-06 No fix listed CWE-89
Open these records in search →