Artplacer
2 CVEs across 2 Artplacer products. Browse Artplacer vulnerabilities, severities, and proof-of-concept exploits.
Artplacer products with known CVEs
Artplacer CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-24555 | Medium | 6.5 | 2026-01-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored… |
CVE-2025-67517 | High | 8.5 | 2025-12-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind… |
CVE-2023-7269 | High | 7.5 | 2024-07-19 | The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow… |
CVE-2023-7268 | Medium | 6.5 | 2024-07-19 | The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as… |
CVE-2023-6373 | High | 8.8 | 2024-01-16 | The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable… |