tips-and-tricks-hq

Top products

The 13 most recently published vulnerabilities affecting tips-and-tricks-hq.

• CVE-2026-54811WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability9.3Jun 17, 2026
• CVE-2026-49077WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability5.3Jun 4, 2026
• CVE-2026-28070WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability5.3Mar 19, 2026
• CVE-2026-28073WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1Mar 19, 2026
• CVE-2023-48285WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability5.3Jun 4, 2024
• CVE-2024-30527WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability7.5May 17, 2024
• CVE-2024-33591WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability7.5Apr 29, 2024
• CVE-2021-20782Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors.8.8Jul 14, 2021
• CVE-2020-5651SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL.8.8Oct 21, 2020
• CVE-2020-5650Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.6.1Oct 21, 2020
• CVE-2015-0894SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.6.0Mar 7, 2015
• CVE-2015-0895Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for...6.8Mar 7, 2015
• CVE-2014-6242Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orde...6.5Oct 2, 2014