Prosolution Wp Client

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:prosolution_wp_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductProsolution Wp Client (a1e31759-5b57-5535-9aa7-5d0f90d8bc6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19053 vulnerable 2026-09-16 04:34:15.747763 ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.
Published: 2026-08-10T06:00:17.274Z
Updated: 2026-08-10T19:10:16.343Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19052 vulnerable 2026-09-16 04:34:15.539586 ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls
The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two administrative AJAX actions, and the nonce they rely on is published on its public frontend, allowing any authenticated user, such as a subscriber, to trigger an administrative data synchronisation and to clear the ProSolution WP Client WordPress plugin before 2.0.9's activity records.
Published: 2026-08-12T06:00:18.721Z
Updated: 2026-08-12T12:21:36.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19050 vulnerable 2026-09-16 04:34:15.416047 ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate
The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated user, such as a subscriber, to make the site issue arbitrary requests to internal hosts and services, including requests with an attacker-chosen method, headers and body.
Published: 2026-08-12T06:00:18.494Z
Updated: 2026-08-12T12:22:32.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19049 vulnerable 2026-09-16 04:34:15.326167 ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any authentication or capability check, allowing unauthenticated users to read arbitrary data from the database and to delete the records the ProSolution WP Client WordPress plugin before 2.0.9 stores.
Published: 2026-08-10T06:00:17.102Z
Updated: 2026-08-11T20:42:06.923Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.