Read the docs

neofix

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

neofix records in CISA KEV

No neofix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Downloads List 1 record LOW

Records

1 record in Simple Downloads List · all components

TI-2024-12635 CVE-2024-13594 · GHSA-xcxq-gp74-3365

Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection

Priority LOW 29

The Simple Downloads List plugin for WordPress is vulnerable to SQL Injection via the 'category' attribute of the 'neofix_sdl' shortcode in all versions up to, and including, 1.4.2 due to insufficient escaping on the use…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00416 Published 2025-01-24 No fix listed CWE-89
Open these records in search →