Filtered by vendor Ujsoftware
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-47179 | 1 Ujsoftware | 1 Owm Weather | 2024-11-21 | 4.3 Medium |
Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft. | ||||
CVE-2022-3769 | 1 Ujsoftware | 1 Owm Weather | 2024-11-21 | 8.8 High |
The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor |
Page 1 of 1.