Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Participants Database — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Participants Database, with AI-generated Chinese analysis, references, and POCs.

Vendor: Roland Barker, xnau webdesign

CVE IDTitleCVSSSeverityPublished
CVE-2026-28189 WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability CWE-22 7.4 High2026-08-13
CVE-2026-13596 Participants Database < 2.7.8.4 - Unauthenticated SQL Injection via List Search --2026-08-01
CVE-2026-11354 Participants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter CWE-862 5.3 Medium2026-07-24
CVE-2026-59555 WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability CWE-22 10.0 Critical2026-07-23
CVE-2026-59525 WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability CWE-89 9.3 Critical2026-07-23
CVE-2026-27423 WordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability CWE-862 4.3 Medium2026-07-23
CVE-2025-58008 WordPress Participants Database Plugin <= 2.7.6.3 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-09-22
CVE-2024-43141 WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability CWE-502 9.8 Critical2024-08-13
CVE-2023-48751 WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control CWE-862 4.3 Medium2023-12-18
CVE-2023-31235 WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-11-09
CVE-2022-47612 WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2023-02-28

All 11 known CVE vulnerabilities affecting Participants Database with full Chinese analysis, references, and POCs where available.