Mitchelllevy

4 CVEs across 2 Mitchelllevy products. Browse Mitchelllevy vulnerabilities, severities, and proof-of-concept exploits.

Mitchelllevy products with known CVEs

ProductCVEs
Ahathat2
Ahathat Plugin2
Mitchelllevy CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-11269High7.22025-05-15The AHAthat Plugin WordPress plugin through 1.6 does not sanitize and escape a parameter before using it in a SQL statement, allowing Admin to perform SQL inje…
CVE-2025-4337Medium4.32025-05-06The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorr…
CVE-2025-2511Medium4.92025-03-19The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insuf…
CVE-2024-12595Medium4.72025-01-02The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could le…