Vulnerabilities

TI-2023-21085 CVE-2023-40215 · GHSA-w8vv-fhxr-4vqg

WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00681 Published 2023-11-03 No fix listed CWE-89

TI-2022-03816 CVE-2022-4171 · GHSA-xmpc-x94q-554f

demon image annotation <= 5.0 - Improper Input Restriction Validation

MEDIUM 40

The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00743 Published 2022-12-13 No fix listed CWE-1284

TI-2022-02656 CVE-2022-2864 · GHSA-wggr-6c7f-83m6

The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request…

MEDIUM 41

The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00616 Published 2022-10-28 No fix listed

Vulnerabilities

Filters

WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection

demon image annotation <= 5.0 - Improper Input Restriction Validation

The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request…