Vulnerabilities

TI-2025-36371 CVE-2025-58711 · GHSA-qh3g-9vrf-p9vh

WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-10-29 No fix listed CWE-862

TI-2025-30191 CVE-2025-47694 · GHSA-ffvr-v633-fm2x

WordPress Blog Designer PRO plugin <= 3.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-09-09 No fix listed CWE-79

TI-2025-30192 CVE-2025-47695 · GHSA-7vvx-j9w3-8qr5

WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00641 Published 2025-09-09 No fix listed CWE-98

TI-2025-30193 CVE-2025-47696 · GHSA-76mj-9xxw-w7cp

WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability

LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-08-31 No fix listed CWE-98

TI-2024-25235 CVE-2024-37929 · GHSA-2g94-3f9v-vjg8

WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0035 Published 2024-11-01 No fix listed CWE-862

TI-2024-21212 CVE-2024-32137 · GHSA-hwg9-vq6r-r838

WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00517 Published 2024-04-15 No fix listed CWE-89