Skip to content
OpenAdvisories

Vendor

WebDorado

9 known vulnerabilities.

Products

Contact Form Maker 2 SpiderVPlayer 2 WDSocialWidgets 2 Event Calendar WD 1 Event Calendar WD version 1 SpiderFAQ 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2018-25347

    WordPress Contact Form Maker Plugin 1.12.20 SQL Injection

    WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via…

    WebDorado Contact Form Maker
  • High 7.1
    CVE-2024-31123

    WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scripting vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2.

    WebDorado SpiderFAQ
  • High 7.1
    CVE-2023-46090

    WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado WDSocialWidgets plugin <= 1.0.15 versions.

    WebDorado WDSocialWidgets
  • High 7.1
    CVE-2023-45632

    WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions.

    WebDorado SpiderVPlayer