Solidres - vulnerabilities (CVEs)

6 CVEs in 3 products, 0 in the last 30 days, newest from 2026-04-09.

Products

CVE-2023-54363 - CVSS 6.1 (medium), 2026-04-09: Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by…
CVE-2024-13329 - CVSS 7.1 (high), 2025-02-04: The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…
CVE-2025-23911 - CVSS 8.5 (high), 2025-01-16: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solidres Solidres – Hotel booking plugin solidres allows…
CVE-2023-1377 - CVSS 6.1 (medium), 2023-04-03: The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected…
CVE-2023-1374 - CVSS 4.8 (medium), 2023-03-13: The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due…
CVE-2018-5980 - CVSS 9.8 (critical), 2018-02-17: SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.