Read the docs

Tips and Tricks HQ

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Tips and Tricks HQ records in CISA KEV

No Tips and Tricks HQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
All In One Wordpress Security And Firewall 3 records LOW

Records

13 records

TI-2020-04618 CVE-2020-5651 · GHSA-9996-r9fx-jwv9

SQL injection in Tips and Tricks HQ Simple Download Monitor

Priority MEDIUM 41

SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01506 Published 2020-10-21 No fix listed CWE-89
TI-2021-04008 CVE-2021-20782 · GHSA-5xvg-cwvf-6x65

Cross-site request forgery in Tips and Tricks HQ Software License Manager

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00871 Published 2021-07-14 Fixed in 4.4.6 CWE-352
TI-2014-05140 CVE-2014-6242 · GHSA-f499-3q8w-php5

Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin…

Priority LOW 36

Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parame…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04155 Published 2014-10-02 No fix listed CWE-89
TI-2024-20251 CVE-2024-30527 · GHSA-qvv7-6wf2-wr97

WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

Priority LOW 33

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2024-05-17 No fix listed CWE-1284
TI-2015-00834 CVE-2015-0895 · GHSA-wgwc-hh27-2pcg

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete l…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01076 Published 2015-03-07 No fix listed CWE-352
TI-2026-22411 CVE-2026-28070 · GHSA-83hv-jw3v-m24m

WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-03-19 No fix listed CWE-862
TI-2020-04617 CVE-2020-5650 · GHSA-2gf7-wf94-4pqj

Cross-site scripting in Tips and Tricks HQ Simple Download Monitor

Priority LOW 29

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00943 Published 2020-10-21 No fix listed CWE-79
TI-2023-26148 CVE-2023-48285 · GHSA-2p4r-xjwx-3whg

WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability

Priority LOW 24

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2024-06-04 No fix listed CWE-80
Open these records in search →