Описание
The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection
Ссылки
- ExploitThird Party Advisory
- Release NotesVendor Advisory
- ExploitThird Party Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.4 (включая) до 2.4.5 (исключая)Версия от 2.5 (включая) до 2.5.11 (исключая)Версия от 2.6 (включая) до 2.6.7 (исключая)
Одно из
cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 99%
0.80944
Высокий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
CWE-89
Связанные уязвимости
github
около 4 лет назад
The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection
EPSS
Процентиль: 99%
0.80944
Высокий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
CWE-89