Описание
The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities exploitable by unauthenticated users
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.1.9 (включая)
cpe:2.3:a:digital_product_labs:wpdating:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 89%
0.04375
Низкий
9.8 Critical
CVSS3
4.3 Medium
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
The WPDating WordPress plugin through 7.1.9 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities.
EPSS
Процентиль: 89%
0.04375
Низкий
9.8 Critical
CVSS3
4.3 Medium
CVSS3