TI-2020-12233 CVE-2020-15537 · GHSA-2jhj-4276-cq8h
An issue was discovered in the Vanguard plugin 2.1 for WordPress.
Priority LOW 30
An issue was discovered in the Vanguard plugin 2.1 for WordPress.
Vulnerabilities
5 records
TI-2017-13162 CVE-2017-17937 · GHSA-gfxc-cqp8-pq2w
Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
Priority LOW 28
Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
TI-2017-13161 CVE-2017-17936 · GHSA-m2v6-x3f9-c63q
Vanguard Marketplace Digital Products PHP has CSRF via /search.
Priority LOW 38
Vanguard Marketplace Digital Products PHP has CSRF via /search.
TI-2017-13104 CVE-2017-17874 · GHSA-wq3q-4hgc-4j74
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a…
Priority MEDIUM 47
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.
TI-2017-13103 CVE-2017-17873 · GHSA-2rqw-vx2c-xfgw
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
Priority MEDIUM 47
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.