Read the docs

solidres

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

solidres records in CISA KEV

No solidres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Solidres 4 records MEDIUM

Records

6 records

TI-2024-12372 CVE-2024-13329 · GHSA-j6vh-r2v3-c7fp

Solidres <= 0.9.4 - Reflected XSS

Priority MEDIUM 64

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users suc…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00306 Published 2025-02-04 No fix listed CWE-79
TI-2023-01301 CVE-2023-1377 · GHSA-243v-xr6m-2w5j

Solidres <= 0.9.4 - Multiple Reflected XSS

Priority MEDIUM 60

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-04-03 No fix listed
TI-2023-30636 CVE-2023-54363 · GHSA-63jc-q38q-j7qg

Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

Priority MEDIUM 56

Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multiple GET parameters including show, reviews, type_id, d…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00235 Published 2026-04-09 No fix listed CWE-79
TI-2025-17678 CVE-2025-23911 · GHSA-7q95-wg86-xh34

WordPress Solidres – Hotel booking plugin for WordPress Plugin <= 0.9.4 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solidres Solidres – Hotel booking plugin solidres allows SQL Injection.This issue affects Solidres – Hotel booking plu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0052 Published 2025-01-16 No fix listed CWE-89
TI-2023-01299 CVE-2023-1374 · GHSA-pv8p-73f5-h425

Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 23

The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00612 Published 2023-03-13 No fix listed CWE-79
Open these records in search →