Skip to content
OpenAdvisories

Vendor

PressTigers

20 known vulnerabilities.

5 results · Clear filters · Feed

  • High 8.8

    WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7.

  • High 7.5

    ZIP Code Based Content Protection <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter

    The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter. This is due to insufficient escaping on the user supplied parameter and lack of sufficient prepa…

  • High 7.5

    WordPress Simple Job Board plugin <= 2.13.7 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simple-job-board allows Retrieve Embedded Sensitive Data.This issue affects Simple Job Board: from n/a through <= 2.13.7.

  • High 7.6

    WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: fr…

  • High 7.2

    Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection

    The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-…