Vulnerabilities > TRI > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-27 | CVE-2023-0381 | Unspecified vulnerability in TRI Gigpress The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks | 8.8 |
| 2019-09-08 | CVE-2019-16120 | Improper Neutralization of Formula Elements in a CSV File vulnerability in TRI Event Tickets CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature. | 8.8 |
| 2019-08-28 | CVE-2015-9353 | SQL Injection vulnerability in TRI Gigpress The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066. | 7.2 |