Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: WP Marka Clear all filters
TI-2025-16253 CVE-2025-22349 · GHSA-v6v8-rm6c-8j83

WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows SQL Injection.This issue affects WordPress Auction Plugin: from n…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00489 Published 2025-01-07 No fix listed CWE-89
TI-2024-08223 CVE-2024-8857 · GHSA-f8c3-q6gm-6v3x

WordPress Auction <= 3.7 - Editor+ Stored XSS

Priority MEDIUM 55

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2025-01-07 No fix listed CWE-79
TI-2024-08221 CVE-2024-8855 · GHSA-qrfp-c3c5-pw2c

WordPress Auction <= 3.7 - Editor+ SQL Injection

Priority HIGH 82

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00647 Published 2025-01-07 No fix listed CWE-89
TI-2024-36296 CVE-2024-54207 · GHSA-9fhv-36q2-hmq8

WordPress WordPress Auction Plugin plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows Stored XSS.This issue affects WordPress Auction Plugin: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00269 Published 2024-12-06 No fix listed CWE-79
TI-2024-34529 CVE-2024-51615 · GHSA-25cw-w9h4-7x54

WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows SQL Injection.This issue affects WordPress Auction Plugin: from n…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00462 Published 2024-12-06 No fix listed CWE-89