Advisories · Technology
ProSolution WP Client.
Every CVE that names ProSolution WP Client among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter
- ProSolution WP Client
- Cross-site scripting (XSS)
- CVSS 7.1 High
ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters
- ProSolution WP Client
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
ProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters
- ProSolution WP Client
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override
- ProSolution WP Client
- Unrestricted file upload
- CVSS 4.3 Medium
ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls
- ProSolution WP Client
- Broken access control
- CVSS 6.4 Medium
ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate
- ProSolution WP Client
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
- ProSolution WP Client
- SQL injection
- CVSS 8.6 High
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
- ProSolution WP Client
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
ProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'
- ProSolution WP Client
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
- ProSolution WP Client
- Unrestricted file upload