Filtered by vendor Wpdevart Subscriptions
Total 42 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24442 1 Wpdevart 1 Poll\, Survey\, Questionnaire And Voting System 2024-11-21 9.8 Critical
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks
CVE-2018-10363 1 Wpdevart 1 Booking Calendar 2024-11-21 N/A
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.