Artplacer Artplacer Widget
3 CVEs affecting Artplacer Artplacer Widget. Latest disclosed: 2024-07-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6373 | High | 8.8 | 2024-01-16 | The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable… |
CVE-2023-7269 | High | 7.5 | 2024-07-19 | The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow… |
CVE-2023-7268 | Medium | 6.5 | 2024-07-19 | The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as… |