Filtered by vendor Codepeople Subscriptions
Filtered by product Music Store Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-36082 1 Codepeople 1 Music Store 2024-11-21 6.5 Medium
SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker.
CVE-2016-10992 1 Codepeople 1 Music Store 2024-11-21 6.1 Medium
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.