Vulnerabilities

TI-2025-12694 CVE-2025-13892 · GHSA-gfjh-r2j2-6qf3

MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting

LOW 27

The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 1.2 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2026-01-09 No fix listed CWE-79

TI-2008-06161 CVE-2008-6471 · GHSA-vcmj-3jxm-63qf

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote…

LOW 35

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-03-13 No fix listed CWE-89

TI-2008-02665 CVE-2008-2790 · GHSA-2hcm-f2ff-9x8w

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote…

LOW 35

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01061 Published 2008-06-20 No fix listed CWE-89

Vulnerabilities

Filters

MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote…

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote…