Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: CleverReach® Clear all filters
TI-2025-41643 CVE-2025-68034 · GHSA-3cxv-pxqj-hqq3

WordPress CleverReach® WP plugin <= 1.5.21 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00481 Published 2026-01-22 No fix listed CWE-89
TI-2025-31174 CVE-2025-49059 · GHSA-5w3r-75pc-x5cx

WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2025-08-14 No fix listed CWE-89
TI-2025-23338 CVE-2025-32241 · GHSA-4vq9-542f-qfqx

WordPress Official CleverReach WooCommerce Integration plugin <= 3.4.6 - CSRF to Settings Change vulnerability

Priority LOW 35

Cross-Site Request Forgery (CSRF) vulnerability in CleverReach® Official CleverReach Plugin for WooCommerce cleverreach-wc allows Cross Site Request Forgery.This issue affects Official CleverReach Plugin for WooCommerce:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00285 Published 2025-04-04 No fix listed CWE-352