Описание
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.71 (включая)
Одно из
cpe:2.3:a:wordpress:wordspew:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:1.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:1.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:1.8:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.5:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.8:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.9:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.31:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.32:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.85:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.91:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.92:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.93:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.94:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.95:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.01:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.02:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.15:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.16:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.021:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.022:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.31:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.32:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.33:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.34:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.51:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.52:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.00664
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
почти 4 года назад
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.
EPSS
Процентиль: 71%
0.00664
Низкий
7.5 High
CVSS2
Дефекты
CWE-89