Skip to content
OpenAdvisories

Product · Nitesh

Ultimate Auction

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-68084

    WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

    Nitesh Ultimate Auction
  • Medium 5.3
    CVE-2025-66125

    WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

    Nitesh Ultimate Auction
  • Medium 4.3
    CVE-2024-37543

    WordPress Ultimate Auction plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Nitesh Ultimate Auction ultimate-auction allows Cross Site Request Forgery.This issue affects Ultimate Auction : from n/a through <= 4.2.5.

    Nitesh Ultimate Auction