Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Picture-Planet GmbH Clear all filters
TI-2025-36062 CVE-2025-58257 · GHSA-7p64-qw84-3vv6

WordPress Verowa Connect plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Stored XSS.This issue affects Verowa Connect: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2025-23674 CVE-2025-32609 · GHSA-gr2m-j2m7-6qm7

WordPress Verowa Connect Plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Reflected XSS.This issue affects Verowa Connect: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-23741 CVE-2025-32676 · GHSA-hx3q-gx9q-hxmw

WordPress Verowa Connect plugin <= 3.0.5 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00523 Published 2025-04-09 No fix listed CWE-89
TI-2024-10621 CVE-2024-11460 · GHSA-j59v-vvgm-rcmg

Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection

Priority LOW 39

The Verowa Connect plugin for WordPress is vulnerable to SQL Injection via the 'search_string' parameter in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2024-12-06 No fix listed CWE-89