Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wmwp-pv69-5487

Опубликовано: 20 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.3

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP allows SQL Injection. This issue affects Custom API for WP: from n/a through 4.2.2.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP allows SQL Injection. This issue affects Custom API for WP: from n/a through 4.2.2.

EPSS

Процентиль: 34%
0.00418
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.3
nvd
11 месяцев назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP custom-api-for-wp allows SQL Injection.This issue affects Custom API for WP: from n/a through <= 4.2.2.

EPSS

Процентиль: 34%
0.00418
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-89