Skip to content
OpenAdvisories

Vendor

mitchelllevy

2 known vulnerabilities.

Products

AHAthat Plugin 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-4337

    AHAthat Plugin <= 1.6 - Cross-Site Request Forgery to AHA Page Deletion

    The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the aha_plugin_page() function. This makes it possible for unauthenticated a…

    mitchelllevy AHAthat Plugin Web / CMS
  • Medium 4.9
    CVE-2025-2511

    AHAthat Plugin <= 1.6 - Authenticated (Administrator+) SQL Injection via id Parameter

    The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S…

    mitchelllevy AHAthat Plugin Web / CMS