Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Subscribe To Category Project Component: Subscribe To Category Clear all filters
TI-2023-15872 CVE-2023-32590 · GHSA-6cxr-f776-wfqv

WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a thro…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01808 Published 2023-12-20 No fix listed CWE-89
TI-2023-19766 CVE-2023-38382 · GHSA-mq7v-wfr3-56f3

WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection

Priority HIGH 82

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows SQL Injection.This issue affects Subscribe to Ca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2023-11-06 No fix listed CWE-89