Picture-Planet vulnerabilities
We track 3 vulnerabilities in Picture-Planet products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2025.
Latest Picture-Planet vulnerabilities
- 7.1 High severity
Verowa Connect: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Reflected XSS.This issue affects Verowa Connect: from n/a through <= 3.0.4.
- 7.6 High severity
Verowa Connect: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through <= 3.0.5.
- 7.5 High severity
Verowa Connect: Improper Neutralization of Special Elements used in an SQL Command
The Verowa Connect plugin for WordPress is vulnerable to SQL Injection via the 'search_string' parameter in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing