Vulnerabilities

TI-2025-41579 CVE-2025-67970 · GHSA-j4g8-p5xf-cx8j

WordPress Schedula plugin <= 1.0 - Broken Access Control vulnerability

LOW 26

Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schedula: from n/a through <= 1.0.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0034 Published 2026-02-20 No fix listed CWE-862

TI-2025-34442 CVE-2025-54679 · GHSA-2fc6-qgjv-7hw5

WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability

LOW 39

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Chan…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00417 Published 2025-08-14 No fix listed CWE-862

TI-2025-23630 CVE-2025-32565 · GHSA-9395-rh4g-vq38

WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability

MEDIUM 41

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Produc…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00547 Published 2025-04-11 No fix listed CWE-89

TI-2025-16680 CVE-2025-22799 · GHSA-9mjh-4fxm-m933

WordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability

LOW 37