Participants Database

Güvenlik açıkları

• CVE-2026-59555kimlik doğrulamasız≤ 2.7.8.3

  WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability

  Kritik 10.0

• CVE-2024-43141kimlik doğrulamasız≤ 2.5.9.2

  WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2026-59525kimlik doğrulamasız≤ 2.7.8.3

  WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2023-31235kimlik doğrulamasız · tıklama gerekir≤ 2.4.9

  WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-48751giriş gerekir≤ 2.5.5

  WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control

  Yüksek 8.8

• CVE-2014-3961

  SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers

  Yüksek 7.5

• CVE-2026-28189kimlik doğrulamasız · tıklama gerekir≤ 2.7.8.4

  WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability

  Yüksek 7.4

• CVE-2025-58008giriş gerekir≤ 2.7.6.3

  WordPress Participants Database Plugin <= 2.7.6.3 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2017-14126kimlik doğrulamasız · tıklama gerekir

  The Participants Database plugin before 1.7.5.10 for WordPress has XSS.

  Orta 6.1

• CVE-2026-11354kimlik doğrulamasız≤ 2.7.8.3

  Participants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter

  Orta 5.3

• CVE-2022-47612kimlik doğrulamasız · tıklama gerekir≤ 2.4.5

  WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Orta 4.3

• CVE-2026-27423abone+≤ 2.7.8.4

  WordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability

  Orta 4.3