Codepeople
Codepeople Music Store: vulnerabilidades y CVE
Codepeople Music Store tiene 4 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-82304 | Alta (8.6) | 0.45% | — | 5 sept 2026 | The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. |
| CVE-2025-24626 | Alta (7.1) | 0.26% | — | 27 ene 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Music Store music-store allows Reflected XSS.This issue affects Music Store: from n/a through <= 1.1.19. |
| CVE-2024-36082 | Media (6.5) | 0.52% | — | 7 jun 2024 | SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in… |
| CVE-2016-10992 | Media (6.1) | 1.6% | — | 17 sept 2019 | The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Codepeople
Calculated Fields Form · 14Appointment Booking Calendar · 12WP Time Slots Booking Form · 12Contact Form Email · 11Booking Calendar Contact Form · 7CP Contact Form With Paypal · 5Polls CP · 5Form Builder CP · 4CP Multi View Event Calendar · 4CP Polls · 4Sell Downloads · 2Payment Form FOR Paypal PRO · 2