Advisories · Technology

xnau webdesign Participants Database.

Every CVE that names xnau webdesign Participants Database among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112860 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
- xnau webdesign Participants Database
- SQL injection
Not analysed yet 23 Oct 2026
CVE-2026-112862 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
- xnau webdesign Participants Database
- Insecure deserialization
Not analysed yet 23 Oct 2026
CVE-2026-112861 CVE record

CVSS 6.3 Medium

WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
- xnau webdesign Participants Database
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2025-58008 CVE record

CVSS 6.5 Medium

WordPress Participants Database Plugin <= 2.7.6.3 - Cross Site Scripting (XSS) Vulnerability
- xnau webdesign Participants Database
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025