Skip to content

Vendor

Adivaha vulnerabilities

2 published CVES affecting Adivaha, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Adivaha alerts

Products

Latest Adivaha CVEs

Newest publication first

  1. CVE-2023-54359 WordPress adivaha Travel Plugin 2.3 SQL Injection via pid

    Published
    HighCVSS 8.8 EPSS 0.28%

    WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pid' GET parameter. Attackers can send requests to the /mobile-app/v3/ endpoint with...

  2. CVE-2023-54358 WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile

    Published
    MediumCVSS 5.1 EPSS 0.27%

    WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the isMobile parameter. Attackers can craft malicious URLs containing JavaScript payloads in the isMobile...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.