Artplacer

5 CVEs across 2 Artplacer products. Browse Artplacer vulnerabilities, severities, and proof-of-concept exploits.

Artplacer products with known CVEs

ProductCVEs
Artplacer Widget3
Artplacer Widget2
Artplacer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24555Medium6.52026-01-23Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored…
CVE-2025-67517High8.52025-12-09Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind…
CVE-2023-7269High7.52024-07-19The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow…
CVE-2023-7268Medium6.52024-07-19The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as…
CVE-2023-6373High8.82024-01-16The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable…