Datainterlock Note Press
4 CVEs affecting Datainterlock Note Press. Latest disclosed: 2022-06-08. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18548 | Critical | 9.8 | 2019-08-16 | The note-press plugin before 0.1.2 for WordPress has SQL injection. |
CVE-2022-1690 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page… |
CVE-2022-1689 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via th… |
CVE-2022-1688 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard… |