Artplacer Widget (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-07-19. Vendor: Unknown.

CVEs of Artplacer Widget

• CVE-2023-7269 - CVSS 7.5 (high), 2024-07-19: The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could…
• CVE-2023-7268 - CVSS 6.5 (medium), 2024-07-19: The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as…
• CVE-2023-6373 - CVSS 8.8 (high), 2024-01-16: The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable…