Tips And Tricks Hq vulnerabilities
13 vulnerabilities
Known vulnerabilities in Tips And Tricks Hq products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- WP Emember4 vulnerabilities
- All In One Wordpress Security And Firewall3 vulnerabilities
- Simple Download Monitor2 vulnerabilities
- Easy Accept Payments1 vulnerabilities
- Software License Manager1 vulnerabilities
- Stripe Payments1 vulnerabilities
- WP Express Checkout (Accept Paypal Payments)1 vulnerabilities
CVE-2021-20782tips and tricks hqsoftware license manager+2
EPSS score0.87%
Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors.CVE-2015-0894tips_and_tricks_hqall_in_one_wordpress_security_and_firewall+1EPSS score1.54%
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2015-0895tips_and_tricks_hqall_in_one_wordpress_security_and_firewall+1EPSS score1.08%
Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.CVE-2020-5650tips and tricks hqsimple download monitor+2EPSS score0.94%
Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.CVE-2020-5651tips and tricks hqsimple download monitor+2EPSS score1.51%
SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL.CVE-2014-6242tips_and_tricks_hqall_in_one_wordpress_security_and_firewall+1EPSS score4.15%
Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parameter in the aiowpsec page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.CVE-2024-30527tips and tricks hqwp express checkout (accept paypal payments)+1EPSS score0.52%
Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.CVE-2024-33591tips and tricks hqeasy accept payments+1EPSS score0.47%
Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments: from n/a through 4.9.10.CVE-2026-54811tips and tricks hqwp emember+1EPSS score0.40%
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.CVE-2026-28070tips and tricks hqwp emember+1EPSS score0.33%
Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.CVE-2026-28073tips and tricks hqwp emember+1EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2.CVE-2026-49077tips and tricks hqwp emember+1EPSS score0.33%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data.
This issue affects WP eMember: from n/a through v10.2.2.CVE-2023-48285tips and tricks hqstripe payments+1EPSS score0.31%
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79.