Vulnerabilities > Wpeverest
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-10-04 | CVE-2021-24654 | Cross-site Scripting vulnerability in Wpeverest User Registration The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. | 5.4 |
2019-07-18 | CVE-2019-13575 | SQL Injection vulnerability in Wpeverest Everest Forms A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. | 9.8 |