Skip to content
OpenAdvisories

Product · Potenza Global Solutions

PGS Core

4 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.5

    WordPress PGS Core Plugin <= 5.9.0 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Potenzaglobalsolutions PGS Core pgs-core allows SQL Injection.This issue affects PGS Core: from n/a through <= 5.9.0.

  • High 7.3

    PGS Core <= 5.8.0 - Missing Authorization via Multiple Functions

    The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to…

  • High 7.5

    PGS Core <= 5.8.0 - Unauthenticated SQL Injection

    The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…