Skip to content
OpenAdvisories

Vendor

robfelty

3 known vulnerabilities.

Products

Collapsing Categories 2 Collapsing Archives 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12025 Public exploit

    Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection

    The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied para…

    robfelty Collapsing Categories Web / CMS