Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Faboba Clear all filters
TI-2017-14336 CVE-2017-20272 · GHSA-fr59-fqc2-p944

Joomla Ultimate Property Listing 1.0.2 SQL Injection via sf_selectuser_id

Priority HIGH 77

Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the sf_selectuser_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00294 Published 2026-06-19 No fix listed CWE-89
TI-2024-06370 CVE-2024-6869 · GHSA-v69c-3f9p-xq6p

Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

Priority LOW 31

The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00312 Published 2024-08-08 No fix listed CWE-862