Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Web-X Clear all filters
TI-2022-23522 CVE-2022-47445 · GHSA-rq59-f2vw-wx6p

WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a throu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-11-03 No fix listed CWE-89
TI-2022-01075 CVE-2022-1186 · GHSA-9fwm-2jcf-cq55

Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure

Priority LOW 32

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0117 Published 2022-04-19 No fix listed CWE-200