Read the docs

azzaroco

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

azzaroco records in CISA KEV

No azzaroco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Debug Assistant 2 records LOW Ultimate Membership Pro 2 records MEDIUM Ultimate Learning Pro 1 record LOW

Records

1 record in Ultimate Learning Pro · all components

TI-2024-12868 CVE-2024-13846 · GHSA-vrvx-7jh3-63wq

Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter

Priority LOW 23

The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied para…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00397 Published 2025-02-21 No fix listed CWE-89
Open these records in search →