Mitchelllevy Ahathat Plugin
2 CVEs affecting Mitchelllevy Ahathat Plugin. Latest disclosed: 2025-05-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2511 | Medium | 4.9 | 2025-03-19 | The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insuf… |
CVE-2025-4337 | Medium | 4.3 | 2025-05-06 | The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorr… |