Vulnerabilities (CVE)

Filtered by vendor Wp-championship Project Subscribe
Filtered by product Wp-championship
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-5308 1 Wp-championship Project 1 Wp-championship 2015-11-04 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.