Wp-championship Project

Wp-championship

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2022-1967

Exploit
  • EPSS 0.1%
  • Veröffentlicht 04.07.2022 13:15:08
  • Zuletzt bearbeitet 21.11.2024 06:41:51

The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update the plugin's settings. Due to...

7.5

CVE-2015-5308

Exploit
  • EPSS 0.93%
  • Veröffentlicht 02.11.2015 19:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) c...