CVE Intelligence

Xenioushk BWL Pro Voting Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xenioushk BWL Pro Voting Manager: 2 record(s), with affected versions and fixes.

CVE-2025-68991 Medium · 6.5 CWE-79 Dec 30, 2025
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows DOM-Based XSS.This issue affects BWL Pro Voting Manager: from n/a through <= 1.4.9.
CVE-2025-68990 High · 8.5 CWE-89 Dec 30, 2025
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting Manager: from n/a through <= 1.4.9.