xnau webdesign has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 9.3 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-112862Critical· 9.8WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability54CVE-2026-112860Critical· 9.3WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability51CVE-2026-112861Medium· 6.3WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability35
xnau webdesign vulnerabilities
CVEs affecting xnau webdesign, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-112860Critical· 9.3WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/…
CVE-2026-112862Critical· 9.8WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5.
CVE-2026-112861Medium· 6.3WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database…