Threat Database

Threat Entry Updated 2026-06-17

WP Marka WordPress Auction - SQL Injection (CVE-2025-22349)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through

PLUGIN WP Marka WordPress Auction

CVE-2025-22349

HIGH CVSS 7.6 2025-01-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

WP Marka WordPress Auction - Cross-Site Scripting (XSS) (CVE-2024-54207)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows Stored XSS.This issue affects WordPress Auction Plugin: from n/a through

PLUGIN WP Marka WordPress Auction

CVE-2024-54207

MEDIUM CVSS 5.9 2024-12-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

WP Marka WordPress Auction - SQL Injection (CVE-2024-51615)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through

PLUGIN WP Marka WordPress Auction

CVE-2024-51615

CRITICAL CVSS 9.3 2024-12-06

Risk Score

Open Full Technical Breakdown