Datainterlock Note Press — known CVE vulnerabilities

Every CVE whose affected-product data names Datainterlock Note Press, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-18548 — CVSS 9.8 (critical): The note-press plugin before 0.1.2 for WordPress has SQL injection.
• CVE-2022-1688 — CVSS 2.7 (low): The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via…
• CVE-2022-1689 — CVSS 2.7 (low): The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when…
• CVE-2022-1690 — CVSS 2.7 (low): The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL…