Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57637
HistoryJun 13, 2022 - 12:00 a.m.

WordPress Cube Slider plugin SQL注入漏洞

2022-06-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

0.001 Low

EPSS

Percentile

21.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Cube Slider plugin 1.2 and earlier versions are vulnerable to SQL injection, which stems from the application’s failure to clean up or escape the idslider parameter before using it for SQL queries. or escaping before using the idslider parameter for SQL queries. A highly privileged attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
wordpress cube slider pluginle1.2

0.001 Low

EPSS

Percentile

21.9%

Related for CNVD-2022-57637