Saeros1984 vulnerabilities
Published CVEs affecting Saeros1984 products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-24624
High · 7.6
CWE-89 Jan 23, 2026
WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through <= 1.0.
CVE-2026-24623
High · 7.1
CWE-79 Jan 23, 2026
WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in saeros1984 Neoforum neoforum allows Reflected XSS.This issue affects Neoforum: from n/a through <= 1.0.