Skip to content
OpenAdvisories

Vendor

pmbaldha

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.9

    Email Tracker <= 5.3.15 - Authenticated (Admin+) SQL Injection

    The Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for WordPress Emails plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.3.15 due to insufficient escapi…

  • Medium 6.3

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…