Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Adivaha Clear all filters
TI-2023-30632 CVE-2023-54359 · GHSA-4hfq-67c2-xq9j

WordPress adivaha Travel Plugin 2.3 SQL Injection via pid

Priority HIGH 77

WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pid' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0028 Published 2026-04-09 No fix listed CWE-89
TI-2023-30631 CVE-2023-54358 · GHSA-46qr-c6wf-gmhj

WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile

Priority LOW 23

WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the isMobile parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00273 Published 2026-04-09 No fix listed CWE-79