Solwin vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2025-58711Blog Designer PRO (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-10-29CVE Database V5CVE-2025-58711 Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8. EPSS 0.3%Vulnerability solwin	CVE Database V5	2025-10-29
High	7.1	EPSS 0.2%	CVE-2025-47694Blog Designer PRO (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-09-09CVE Database V5CVE-2025-47694 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7. EPSS 0.2%Vulnerability solwin	CVE Database V5	2025-09-09
High	7.5	EPSS 0.6%	CVE-2025-47695Blog Designer PRO (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.6%2025-09-09CVE Database V5CVE-2025-47695 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7. EPSS 0.6%Vulnerability solwin	CVE Database V5	2025-09-09
High	8.1	EPSS 0.6%	CVE-2025-47696Blog Designer PRO (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2025-08-31CVE Database V5CVE-2025-47696 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7. EPSS 0.6%Vulnerability solwin CWE-98	CVE Database V5	2025-08-31
Medium	6.3	EPSS 0.4%	CVE-2024-37929User Activity Log Pro (WordPress plugin) · Missing Authorization Medium6.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-37929 Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4. EPSS 0.4%Vulnerability solwin CWE-862	CVE Database V5	2024-11-01
High	8.5	EPSS 0.5%	CVE-2024-32137User Activity Log Pro (WordPress plugin) · SQL Injection High8.5EPSS 0.5%2024-04-15CVE Database V5CVE-2024-32137 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4. EPSS 0.5%Vulnerability Solwin CWE-89	CVE Database V5	2024-04-15

Page 1 of 1