Approved changes feed: RSS · Atom

cpe:2.3:a:daisycon:daisycon_prijsvergelijkers:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDaisycon (0621e6fd-3912-593f-9f1a-0ddb51f3c0d5)
ProductDaisycon Prijsvergelijkers (b42a00da-a346-5732-93d8-aae98d63cfb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4590 vulnerable 2026-06-08 07:29:16.568765 Daisycon prijsvergelijkers <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Daisycon prijsvergelijkers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'daisycon_uitvaart' shortcode in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-05-31T06:40:55.434Z
Updated: 2026-04-08T17:01:07.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32148 vulnerable 2026-06-08 07:18:59.220892 WordPress Daisycon prijsvergelijkers plugin <= 4.8.4 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daisycon Daisycon prijsvergelijkers daisycon allows SQL Injection.This issue affects Daisycon prijsvergelijkers: from n/a through <= 4.8.4.
Published: 2025-04-04T15:58:35.750Z
Updated: 2026-04-28T16:12:17.652Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.