Filtered by vendor Ujsoftware
Subscriptions
Filtered by product Owm Weather
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-3769 | 1 Ujsoftware | 1 Owm Weather | 2025-04-25 | 8.8 High |
The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor | ||||
CVE-2022-47179 | 1 Ujsoftware | 1 Owm Weather | 2025-01-13 | 4.3 Medium |
Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft. |
Page 1 of 1.