Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: pressaholic Clear all filters
TI-2024-35102 CVE-2024-52431 · GHSA-5wm2-wm6h-c24c

WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressaholic WordPress Video Robot - The Ultimate Video Importer allows SQL Injection.This issue affects WordPress Vide…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-11-18 No fix listed CWE-89
TI-2024-08529 CVE-2024-9192 · GHSA-f3hj-px43-qpfm

WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update

Priority MEDIUM 41

The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() functio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00582 Published 2024-11-16 No fix listed CWE-269