ArtPlacer Widget vulnerabilities

2 known vulnerabilities in ArtPlacer Widget from Artplacer. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  ArtPlacer Widget: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-67517Dec 9, 2025Artplacer

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through <= 2.22.9.2.

• 7.5 High severity

  ArtPlacer Widget: Cross-Site Request Forgery

  CVE-2023-7269Jul 19, 2024ArtPlacer Widget

  The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack