Skip to content
OpenAdvisories

Vendor

chuck1982

3 known vulnerabilities.

Products

WP Inventory Manager 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-76005

    WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute

    The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_order' Shortcode Attribute in all versions up to, and including, 2.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

    chuck1982 WP Inventory Manager Web / CMS
  • Medium 6.5
    CVE-2026-17607

    WP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) SQL Injection via 'where' Shortcode Attribute

    The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the [wpinventory] shortcode in versions up to, and including, 2.5.1. This is due to insufficient escaping on the user-supplied parameter and la…

    chuck1982 WP Inventory Manager Web / CMS
  • Medium 6.1
    CVE-2024-13434

    WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting

    The WP Inventory Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauth…

    chuck1982 WP Inventory Manager Web / CMS