Trustyplugins vulnerabilities
We track 2 vulnerabilities in Trustyplugins products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Trustyplugins vulnerabilities
- 9.8 Critical severity
Category AJAX Filter – Advanced Filter for…: Improper Control of Filename for Include/Require Statement in PHP Program
The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.2 via the 'params[caf-post-layout]' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary f
- 9.8 Critical severity
Country State City Dropdown CF7: Improper Neutralization of Special Elements used in an SQL Command
The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on