PatchTheCVE: webidsupporthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-35409: WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.https://patchthecve.com/cve/CVE-2024-35409.htmlhttps://patchthecve.com/cve/CVE-2024-35409.htmlWed, 17 Jun 2026 07:34:52 +0000CRITICAL 9.8: WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.CVE-2024-32166: Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, alhttps://patchthecve.com/cve/CVE-2024-32166.htmlhttps://patchthecve.com/cve/CVE-2024-32166.htmlWed, 17 Jun 2026 07:29:23 +0000HIGH 8.8: Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).CVE-2023-47397: WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.https://patchthecve.com/cve/CVE-2023-47397.htmlhttps://patchthecve.com/cve/CVE-2023-47397.htmlWed, 17 Jun 2026 06:32:41 +0000CRITICAL 9.8: WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.