Auctionplugin - vulnerabilities (CVEs)

2 CVEs in 2 products, 0 in the last 30 days, newest from 2025-05-02.

Products

• Ultimate Auction - 1 CVEs
• Ultimate Wordpress Auction Plugin - 1 CVEs

Newest CVEs of Auctionplugin

• CVE-2025-4204 - CVSS 7.5 (high), 2025-05-02: The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to…
• CVE-2025-0958 - CVSS 6.3 (medium), 2025-03-04: The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 4.2.9.…