Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Blocksera Subscribe
Filtered by product Cryptocurrency Widgets Pack
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-4059 1 Blocksera 1 Cryptocurrency Widgets Pack 2023-01-09 N/A 9.8 CRITICAL
The Cryptocurrency Widgets Pack WordPress plugin through 1.8.1 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVE-2022-44588 1 Blocksera 1 Cryptocurrency Widgets Pack 2022-12-19 N/A 9.8 CRITICAL
Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.