CVE Intelligence

UpSolution vulnerabilities

🔔 Create alert RSS

Published CVEs affecting UpSolution products: 3 record(s), with severity, exploitation and fixes.

UpSolution Core 3

Exploited only (KEV) →

CVE-2026-95610 High · 8.5 CWE-89 Oct 9, 2026
WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.
CVE-2026-94166 High · 7.1 CWE-79 Oct 9, 2026
WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44.
CVE-2026-24983 High · 7.1 CWE-79 Mar 25, 2026
WordPress UpSolution Core plugin <= 8.41 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through <= 8.41.