ArtPlacer Widget vulnerabilities
We track 2 vulnerabilities in ArtPlacer Widget products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 19, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest ArtPlacer Widget vulnerabilities
- 7.5 High severity
ArtPlacer Widget: Cross-Site Request Forgery
The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
- 8.8 High severity
ArtPlacer Widget: Improper Neutralization of Special Elements used in an SQL Command
The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CS