Vulnerabilities

TI-2012-02274 CVE-2012-2633 · GHSA-w4gw-5v3x-53hr

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before…

LOW 24

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02096 Published 2012-06-15 No fix listed CWE-79

TI-2008-00492 CVE-2008-0520 · GHSA-vmrm-3gr2-66vg

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3…

LOW 38

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02851 Published 2008-01-31 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before…

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3…