Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-67517

WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through <= 2.22.9.2.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Artplacer Wordpress
Products
Artplacer Widget Wordpress
CVE-2026-24555

WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through <= 2.23.2.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Artplacer Wordpress
Products
Artplacer Widget Wordpress
CVE-2023-6373

ArtPlacer Widget < 2.20.7 - Editor+ SQLi

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor (or above)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Artplacer
Products
Artplacer Widget
CVE-2023-7268

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Artplacer
Products
Artplacer Widget
CVE-2023-7269

ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Artplacer
Products
Artplacer Widget