Skip to content
OpenAdvisories

Product · scriptsbundle

Exertio Framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-49402

    WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through <= 1.3.3.

    scriptsbundle Exertio Framework
  • High 8.1
    CVE-2024-13373

    Exertio Framework <= 1.3.1 - Unauthenticated Arbitrary User Password Update

    The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due to the plugin not properly validating a user's identity prior to updating their password through the…

    scriptsbundle Exertio Framework Web / CMS