Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19827
HistoryJan 26, 2022 - 12:00 a.m.

WordPress Cookie Notification Plugin Plugin SQL Injection Vulnerability

2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

37.7%

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. A SQL injection vulnerability exists in previous versions of the Wordpress Plugin Cookie Notification Plugin 1.0.9, which stems from the product’s failure to validate special characters in the id parameter of a Get request when editing an admin panel action. Validation. An attacker could execute malicious SQL statements through this vulnerability.

0.001 Low

EPSS

Percentile

37.7%