Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-59808
HistoryMay 07, 2022 - 12:00 a.m.

WordPress Documentor plugin SQL注入漏洞

2022-05-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.04 Low

EPSS

Percentile

92.1%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Documentor plugin 1.5.3 and earlier versions are vulnerable to SQL injection, which stems from a failure to clean up and escape user input before executing an insert SQL statement. An unauthenticated attacker could exploit this vulnerability to conduct SQL injection attacks.

CPENameOperatorVersion
wordpress documentor pluginle1.5.3