Browse all 4 CVE security advisories affecting Solwin Infotech. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Solwin Infotech develops custom web and mobile applications, primarily serving e-commerce and enterprise clients. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and misconfigured access controls. While no major public security incidents have been documented, the company maintains four CVEs on record, highlighting persistent security gaps in their development practices. Their applications typically require regular security updates to address newly discovered flaws, emphasizing the need for robust coding standards and thorough vulnerability testing in their development lifecycle.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-31356 | WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability — User Activity LogCWE-89 | 7.6 | High | 2024-04-10 |
| CVE-2022-45078 | WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injection — User BlockerCWE-1236 | 5.9 | Medium | 2023-11-07 |
| CVE-2023-37966 | WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection — User Activity LogCWE-89 | 7.6 | High | 2023-10-31 |
| CVE-2023-30485 | WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS) — Responsive WordPress Slider – Avartan Slider LiteCWE-79 | 7.1 | High | 2023-09-04 |
This page lists every published CVE security advisory associated with Solwin Infotech. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.