Artplacer vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Artplacer products: 2 record(s), with severity, exploitation and fixes.

ArtPlacer Widget 2

Exploited only (KEV) →

CVE-2026-24555 Medium · 6.5 CWE-79 Jan 23, 2026

WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through <= 2.23.2.

CVE-2025-67517 High · 8.5 CWE-89 Dec 9, 2025

WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through <= 2.22.9.2.