Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-49687 2 Storeapps, Wordpress 2 Smart Manager, Wordpress 2026-04-01 N/A
Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through <= 8.45.0.
CVE-2024-0566 1 Storeapps 1 Smart Manager 2025-05-07 7.2 High
The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.