Skip to content

Vendor

oturia vulnerabilities

2 published CVES affecting oturia, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of oturia alerts

Products

Latest oturia CVEs

Newest publication first

  1. CVE-2018-3810 Smart Google Code Inserter < 3.5 - Stored Cross-Site Scripting

    Published
    CriticalCVSS 9.8 EPSS 91.3% Public exploit

    Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoog...

  2. CVE-2018-3811 Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection

    Published
    CriticalCVSS 9.8 EPSS 42.3% Public exploit

    SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.