Vulnerabilities

TI-2016-09248 CVE-2016-20072 · GHSA-mqcw-c8g2-993q

BBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid

HIGH 77

BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the uid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-06-15 No fix listed CWE-89

TI-2023-18343 CVE-2023-36504 · GHSA-55vx-7w9x-7vxc

WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability

MEDIUM 43

Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00482 Published 2024-06-13 No fix listed CWE-862

TI-2023-17018 CVE-2023-34174 · GHSA-g2r9-7pxp-qr7x

WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00374 Published 2023-08-30 No fix listed CWE-79

Vulnerabilities

Filters

BBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid

WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability

WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)