Advance Post Prefix
Approved changes feed: RSS · Atom
cpe:2.3:a:niceit:advance_post_prefix:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Niceit (e6a389e7-847a-5ea3-9f14-41e27d1ac6da) |
|---|---|
| Product | Advance Post Prefix (9e6088de-7caa-56c8-a74c-44b816cfe06b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12735 |
vulnerable | 2026-06-08 06:25:35.990459 |
Advance Post Prefix <= 1.1.1 - Admin+ SQL Injection
The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above to perform SQL injection attacks
Published: 2025-05-15T20:06:55.578Z
Updated: 2025-05-20T19:31:08.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12734 |
vulnerable | 2026-06-08 06:25:35.989939 |
Advance Post Prefix <= 1.1.1 - Reflected XSS
The Advance Post Prefix WordPress plugin through 1.1.1, Advance Post Prefix WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2025-05-15T20:06:55.376Z
Updated: 2025-05-20T19:31:20.280Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.