Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: coder426 Clear all filters
TI-2024-11704 CVE-2024-12613 · GHSA-rr3p-4f3w-5ghr

Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection

Priority LOW 39

The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2025-01-16 No fix listed CWE-89
TI-2024-11706 CVE-2024-12615 · GHSA-9gqj-gcg6-fqjj

Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2025-01-16 No fix listed CWE-89
TI-2024-11705 CVE-2024-12614 · GHSA-7434-8vjp-8fj4

Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key

Priority LOW 39

The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and includ…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00395 Published 2025-01-16 No fix listed CWE-89