Tips And Tricks Hq

10 CVEs across 6 Tips And Tricks Hq products. Browse Tips And Tricks Hq vulnerabilities, severities, and proof-of-concept exploits.

Tips And Tricks Hq products with known CVEs

ProductCVEs
Wp Emember4
Simple Download Monitor2
Easy Accept Payments1
Software License Manager1
Stripe Payments1
Wp Express Checkout (Accept Paypal Payments)1
Tips And Tricks Hq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54811Critical9.32026-06-17Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.
CVE-2026-49077Medium5.32026-06-04Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Da…
CVE-2026-28073High7.12026-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This i…
CVE-2026-28070Medium5.32026-03-19Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2023-48285Medium5.32024-06-04Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This is…
CVE-2024-30527High7.52024-05-17Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden…
CVE-2024-33591High7.52024-04-29Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments: from n/a through 4.9.10.
CVE-2021-20782High8.82021-07-14Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of adm…
CVE-2020-5651High8.82020-10-21SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL.
CVE-2020-5650Medium6.12020-10-21Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.