Solid Plugins - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2025-05-19.

Products

• Analyticswp - 4 CVEs
• Solid Affiliate - 1 CVEs

Newest CVEs of Solid Plugins

• CVE-2025-39389 - CVSS 9.3 (critical), 2025-05-19: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This…
• CVE-2025-39394 - CVSS 5.3 (medium), 2025-05-19: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP allows Retrieve Embedded Sensitive…
• CVE-2025-39388 - CVSS 5.3 (medium), 2025-05-19: Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
• CVE-2024-13321 - CVSS 9.8 (critical), 2025-03-14: The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to…
• CVE-2024-33637 - CVSS 7.5 (high), 2024-04-29: Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1.