Accesspressthemes vulnerabilities
We track 2 vulnerabilities in Accesspressthemes products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2023.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Accesspressthemes vulnerabilities
- 8.8 High severity
WP Popup Banners WordPress Plugin: Improper Neutralization of Special Elements used in an SQL Command
The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action.
- 7.2 High severity
Testimonial WordPress Plugin – AP Custom…: Improper Neutralization of Special Elements used in an SQL Command
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection