Skip to content
OpenAdvisories

Vendor

chemiker

2 known vulnerabilities.

Products

Podlove Subscribe button 1 e.nigma buttons 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-1118

    Podlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection

    The Podlove Subscribe button plugin for WordPress is vulnerable to UNION-based SQL Injection via the 'button' attribute of the podlove-subscribe-button shortcode in all versions up to, and including, 1.3.10 due to insufficient escaping on the user supplied pa…

    chemiker Podlove Subscribe button Web / CMS