Vulnerabilities (CVE)

Filtered by vendor Wow-company Subscribe
Total 41 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-6926 1 Wow-company 1 Viral Signup 2024-10-07 N/A 9.8 CRITICAL
The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection