Superwhite Demon Image Annotation — known CVE vulnerabilities

Every CVE whose affected-product data names Superwhite Demon Image Annotation, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-2864 — CVSS 8.8 (high): The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. This is…
• CVE-2023-40215 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation…
• CVE-2022-4171 — CVSS 6.5 (medium): The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is…