Vulnerabilities > Wpdevart

DATE CVE VULNERABILITY TITLE RISK
2018-06-13 CVE-2018-10363 Improper Input Validation vulnerability in Wpdevart Booking Calendar 2.2.2
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress.
network
low complexity
wpdevart CWE-20
7.5
2017-09-25 CVE-2017-14125 SQL Injection vulnerability in Wpdevart Responsive Image Gallery Album
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.
network
low complexity
wpdevart CWE-89
critical
9.8