Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Five Minute Webshop Project Clear all filters
TI-2022-01554 CVE-2022-1686 · GHSA-qfqw-52wp-4gvg

Five Minute Webshop <= 1.3.2 - Admin+ SQLi via id

Priority LOW 15

The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00808 Published 2022-06-06 No fix listed CWE-89
TI-2022-01553 CVE-2022-1685 · GHSA-4588-f2xw-66mq

Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby

Priority LOW 24

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01006 Published 2022-06-06 No fix listed CWE-89