GCVE - cpe:2.3:a:unknown:tz_weekly_radio

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:tz_weekly_radio_schedule:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Tz Weekly Radio Schedule (`f0ec9a4f-de3a-5a0e-8c95-85df700c2219`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-87774`	vulnerable	2026-10-13 12:28:48.171894	Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database. Published: 2026-09-18T06:00:14.959Z Updated: 2026-09-18T11:10:11.521Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/802f208f-a3dd-4dc7-b1d2-ec455f0350f7/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-87775`	vulnerable	2026-10-13 12:28:48.124457	Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database. Published: 2026-09-18T06:00:15.157Z Updated: 2026-09-18T11:09:56.998Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/5a2ed5cd-1a05-4b54-b604-f596d8a8b76b/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.