Wpmarka - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2025-01-07.

Products

• Wordpress Auction - 2 CVEs

Newest CVEs of Wpmarka

• CVE-2024-8857 - CVSS 4.8 (medium), 2025-01-07: The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-8855 - CVSS 9.8 (critical), 2025-01-07: The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and…