Wpwave Hide My Wp
3 CVEs affecting Wpwave Hide My Wp. Latest disclosed: 2023-02-06. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4681 | Critical | 9.8 | 2023-02-06 | The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available… |
CVE-2021-36916 | High | 8.6 | 2021-11-24 | The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a… |
CVE-2021-36917 | Medium | 6.5 | 2021-11-24 | WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used… |