Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: UpSolution Clear all filters
TI-2026-69918 CVE-2026-94166 · GHSA-p68x-hxrq-4p9m

Reflected cross-site scripting in WordPress UpSolution Core plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-09 No fix listed CWE-79
TI-2026-69942 CVE-2026-95610 · GHSA-c4q9-w4vh-p5h8

SQL injection in WordPress UpSolution Core plugin

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00205 Published 2026-10-09 No fix listed CWE-89
TI-2023-27796 CVE-2023-50893 · GHSA-qw5v-h476-w9pg

WordPress UpSolution Core Plugin <= 8.17.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution Impreza – WordPress Website and WooCommerce Builder allows Reflected XSS.This issue affects Impreza – WordP…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00351 Published 2023-12-29 No fix listed CWE-79