Plugin icon

ProSolution WP Client

prosolution-wp-client

Vulnerabilities:

10

Last Updated:

September 1, 2026

Active Installs:

10

Published
Title
Fixed in
CVSS
Published
2026-08-17
Title
ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter
Fixed in
Fixed in 2.0.11
CVSS
7.1 (high)
Published
2026-08-17
Title
ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters
Fixed in
Fixed in 2.0.11
CVSS
7.1 (high)
Published
2026-08-15
Title
ProSolution WP Client < 2.0.11 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override
Fixed in
Fixed in 2.0.11
CVSS
9.8 (critical)
Published
2026-08-15
Title
ProSolution WP Client < 2.0.9 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters
Fixed in
Fixed in 2.0.9
CVSS
9.1 (critical)
Published
2026-08-10
Title
ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls
Fixed in
Fixed in 2.0.9
CVSS
4.3 (medium)
Published
2026-08-10
Title
ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate
Fixed in
Fixed in 2.0.9
CVSS
6.4 (medium)
Published
2026-08-06
Title
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
Fixed in
Fixed in 2.0.9
CVSS
8.6 (high)
Published
2026-08-06
Title
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
Fixed in
Fixed in 2.0.6
CVSS
8.6 (high)
Published
2026-05-19
Title
ProSolution WP Client < 2.0.1 - Unauthenticated Arbitrary File Upload via 'files'
Fixed in
Fixed in 2.0.1
CVSS
9.8 (critical)
Published
2026-04-08
Title
ProSolution WP Client < 2.0.0 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
Fixed in
Fixed in 2.0.0
CVSS
9.8 (critical)