Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Adrian Ladó Clear all filters
TI-2025-33255 CVE-2025-53288 · GHSA-qw3w-h2mf-9prv

WordPress PlatiOnline Payments plugin <= 7.0.0 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments plationline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlatiOnline Payments: from n/a through <= 7.0…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00267 Published 2025-06-27 No fix listed CWE-862
TI-2025-31500 CVE-2025-49452 · GHSA-q86v-8422-rx5j

WordPress PostaPanduri plugin <= 2.1.3 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Ladó PostaPanduri postapanduri allows SQL Injection.This issue affects PostaPanduri: from n/a through <= 2.1.3.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00323 Published 2025-06-17 No fix listed CWE-89