Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Felix Welberg Clear all filters
TI-2023-15397 CVE-2023-32094 · GHSA-fqm4-vq4f-gjfc

WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-09 No fix listed CWE-862
TI-2023-16796 CVE-2023-33924 · GHSA-45ch-3c88-xp9m

WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2023-11-06 No fix listed CWE-89