Vulnerabilities

TI-2024-29530 CVE-2024-43941 · GHSA-h7wp-h36v-jjcw

WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability

MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Propovoice Propovoice Pro allows SQL Injection.This issue affects Propovoice Pro: from n/a through 1.7.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-08-29 No fix listed CWE-89

TI-2024-29002 CVE-2024-43350 · GHSA-w7qw-jgg9-3f92

WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability

LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00339 Published 2024-08-18 No fix listed CWE-639

TI-2024-04420 CVE-2024-4747 · GHSA-2p6w-9hp8-fjmg

WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-05-13 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability

WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability

WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability