Skip to content
OpenAdvisories

Vendor

Picture-Planet

4 known vulnerabilities.

Products

Verowa Connect 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-32609

    WordPress Verowa Connect Plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Reflected XSS.This issue affects Verowa Connect: from n/a through <= 3.0.4.

    Picture-Planet Verowa Connect
  • High 7.6
    CVE-2025-32676

    WordPress Verowa Connect plugin <= 3.0.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through <= 3.0.5.

    Picture-Planet Verowa Connect
  • High 7.5
    CVE-2024-11460

    Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection

    The Verowa Connect plugin for WordPress is vulnerable to SQL Injection via the 'search_string' parameter in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…

    Picture-Planet Verowa Connect Web / CMS