Wp-championship Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wp-championship Project records in CISA KEV

No Wp-championship Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-championship 2 records LOW

Records

2 records

TI-2015-04463 CVE-2015-5308 · GHSA-v8f7-xwpc-f4vx

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship…

LOW 37

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) m…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02206 Published 2015-11-02 No fix listed CWE-89

TI-2022-01825 CVE-2022-1967 · GHSA-wr2q-mmhm-ff6j

WP Championship < 9.3 - Multiple CSRF

LOW 29

The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2022-07-04 Fixed in 9.3 CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0