Solid Plugins vulnerabilities
We track 3 vulnerabilities in Solid Plugins products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.
Latest Solid Plugins vulnerabilities
- 9.3 Critical severity
AnalyticsWP: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue affects AnalyticsWP: from n/a through 2.1.2.
- 9.8 Critical severity
AnalyticsWP: Improper Neutralization of Special Elements used in an SQL Command
The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to insufficient authorization checks on the handle_get_stats() function. This makes it possible for unauthenticat
- 7.5 High severity
Solid Affiliate: Insertion of Sensitive Information into Log File
Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1.