WordPress Auction Plugin

WordPress Auction Plugin has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 4 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting.

None of the 5 issues recorded for WordPress Auction Plugin have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (3) reported by Hakiduck.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WordPress Auction Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2024-51615

WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

5 records


2025-01-03 00:00	WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection WordPress Auction Plugin <= 3.7	`CVE-2025-22349`	4.9 Medium	Hakiduck	No
2024-12-17 00:00	WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting WordPress Auction Plugin <= 3.7	`CVE-2024-8857`	5.5 Medium	Bob Matyas	No
2024-12-17 00:00	WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection WordPress Auction Plugin <= 3.7	`CVE-2024-8855`	4.9 Medium	Thanh Kieu	No
2024-12-02 00:00	WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting WordPress Auction Plugin <= 3.7	`CVE-2024-54207`	5.5 Medium	Hakiduck	No
2024-12-02 00:00	WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection WordPress Auction Plugin <= 3.7	`CVE-2024-51615`	7.5 High	Hakiduck	No

Showing 1–5 of 5 reports