ProSolution WP Client vulnerabilities
We track 4 vulnerabilities in ProSolution WP Client products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.
Latest ProSolution WP Client vulnerabilities
- 7.1 High severity
ProSolution WP Client: Improper Neutralization of Input During Web Page Generation
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administr
- 7.1 High severity
ProSolution WP Client: Improper Neutralization of Input During Web Page Generation
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, inclu
- 9.1 Critical severity
ProSolution WP Client: Improper Neutralization of Special Elements used in an SQL Command
The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.
- 8.6 High severity
ProSolution WP Client: Improper Neutralization of Special Elements used in an SQL Command
The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any authentication or capability check, allowing unauthenticated users to read arbitrary