WP Media Sas vulnerabilities
We track 2 vulnerabilities in WP Media Sas products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 22, 2024.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest WP Media Sas vulnerabilities
- 9.8 Critical severity
Search & Replace: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in WP MEDIA SAS Search & Replace search-and-replace.This issue affects Search & Replace: from n/a through 3.2.2.
- 7.2 High severity
Search & Replace: Improper Neutralization of Special Elements used in an SQL Command
The Search & Replace WordPress plugin before 3.2.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks (such as within a multi-site network).