Skip to content
OpenAdvisories

Vendor

robfelty

3 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.5

    WordPress Collapsing Archives plugin <= 3.0.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Archives collapsing-archives allows Blind SQL Injection.This issue affects Collapsing Archives: from n/a through <= 3.0.7.

  • High 8.5

    WordPress Collapsing Categories plugin <= 3.0.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Categories collapsing-categories allows Blind SQL Injection.This issue affects Collapsing Categories: from n/a through <= 3.0.9.

  • High 7.5
    CVE-2024-12025 Public exploit Scanner template

    Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection

    The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied para…