Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wassup_plugin:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWassup Plugin (d410c9c5-1828-51a3-b067-2c63e501b3d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/michelem09/wassup purl2cpe 2026-06-01 10:12:03.258255

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2633 vulnerable 2026-06-08 05:02:05.079709 Details available
Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
Published: 2012-06-15T19:00:00.000Z
Updated: 2024-08-06T19:42:30.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0520 vulnerable 2026-06-08 04:50:16.994328 Details available
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.
Published: 2008-01-31T19:30:00.000Z
Updated: 2024-08-07T07:46:55.073Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.