Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66597
HistoryMar 02, 2022 - 12:00 a.m.

WordPress WP Cloudy plugin SQL injection vulnerability

2022-03-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

42.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress WP Cloudy plugin versions prior to 4.4.9 have a SQL injection vulnerability that stems from the plugin’s failure to escape the post_id parameter before using it in an SQL statement in the admin dashboard, which can be exploited by attackers to cause SQL injection problems.

CPENameOperatorVersion
wordpress wp cloudy pluginlt4.4.9

0.001 Low

EPSS

Percentile

42.8%