Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Wow-estore Component: Side Menu Clear all filters
TI-2021-06864 CVE-2021-24580 · GHSA-2mxj-pg8q-6c2c

Side Menu Lite < 2.2.6 - Authenticated SQL Injection

Priority MEDIUM 41

The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01362 Published 2021-08-30 Fixed in 2.2.6 CWE-89
TI-2021-06808 CVE-2021-24521 · GHSA-39jf-84mp-m232

Side Menu Lite < 2.2.1 - Authenticated SQL Injection

Priority LOW 35

The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01587 Published 2021-08-09 Fixed in 2.2.1 CWE-89
TI-2021-06640 CVE-2021-24348 · GHSA-3545-vxgq-p67f

Side Menu < 3.1.5 - Authenticated (admin+) SQL Injection

Priority LOW 35

The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement without proper sanitis…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01565 Published 2021-06-14 Fixed in 3.1.5 CWE-89