Hide My Wp Wordpress Plugin (Wpwave) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-11-24. Vendor: Wpwave.

CVEs of Hide My Wp Wordpress Plugin

• CVE-2021-36917 - CVSS 7.5 (high), 2021-11-24: WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be…
• CVE-2021-36916 - CVSS 9.8 (critical), 2021-11-24: The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside…