Vulnerabilities > TRI > Gigpress > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-27 | CVE-2023-0381 | Unspecified vulnerability in TRI Gigpress The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks | 8.8 |
| 2019-08-28 | CVE-2015-9353 | SQL Injection vulnerability in TRI Gigpress The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066. | 7.2 |