Skip to content
OpenAdvisories

Vendor

mmrs151

5 known vulnerabilities.

Products

Daily Prayer Time 4 Prayer Times Anywhere 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2024-8621

    Daily Prayer Time <= 2024.08.26 - Authenticated (Contributor+) SQL Injection

    The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'max_word' attribute of the 'quran_verse' shortcode in all versions up to, and including, 2024.08.26 due to insufficient escaping on the user supplied parameter and lack of suff…

    mmrs151 Daily Prayer Time Web / CMS