Photocrati

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-2216 HIGH POC This Week

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi PHP Photocrati

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

3.5%

CVE-2014-100016 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS WordPress PHP Photocrati

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2015-2216

EPSS 3% CVSS 7.5

HIGH POC This Week

WordPress SQLi PHP +1

NVD Exploit-DB

CVE-2014-100016

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS WordPress PHP +1

NVD