Vulnerabilities > WP Championship Project > WP Championship
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-07-04 | CVE-2022-1967 | Cross-Site Request Forgery (CSRF) vulnerability in Wp-Championship Project Wp-Championship The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update the plugin's settings. | 4.3 |
| 2015-11-02 | CVE-2015-5308 | SQL Injection vulnerability in Wp-Championship Project Wp-Championship 5.8 Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter. | 7.5 |