Search vulnerabilities

Results 2

Export CSV
CVE-2022-47445

WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
CVE-2022-1186

Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors