Priority MEDIUM 50
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00652 · Published 2023-11-03 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-08-15 · No fix listed CWE-89
Priority MEDIUM 44
The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01886 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficie…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01017 · Published 2023-11-22 · No fix listed CWE-89
Priority MEDIUM 42
The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of suffici…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00995 · Published 2023-11-22 · No fix listed CWE-89
Priority MEDIUM 42
The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of suf…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of suffici…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of suffi…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and la…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of s…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01039 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient p…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01026 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01026 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficie…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01026 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficien…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01026 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter an…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01026 · Published 2023-10-31 · No fix listed CWE-89
Priority MEDIUM 42
The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user s…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2023-10-20 · No fix listed CWE-89
Priority MEDIUM 41
The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and including, 2.4 due to insufficient escaping on the user suppli…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00613 · Published 2024-08-06 · No fix listed CWE-89
Priority MEDIUM 40
The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2025-06-26 · No fix listed CWE-89
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a through 14.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0028 · Published 2023-11-18 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00252 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00302 · Published 2025-07-04 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery:…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00302 · Published 2025-07-04 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a throu…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00302 · Published 2025-07-04 · No fix listed CWE-89
Load more