Vulnerabilities (CVE)

Filtered by vendor Wpdevart Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-47428 1 Wpdevart 1 Booking Calendar 2023-11-14 N/A 9.8 CRITICAL
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.
CVE-2017-14125 1 Wpdevart 1 Responsive Image Gallery Gallery Album 2017-10-03 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.