Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70769
HistoryMar 24, 2022 - 12:00 a.m.

WordPress Podcast Importer SecondLine plugin SQL injection vulnerability

2022-03-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
podcast
sql injection
vulnerability
php
mysql
plugin
attack

EPSS

0.001

Percentile

41.1%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Podcast Importer SecondLine plugin versions prior to 1.3.8 have a SQL injection vulnerability, which stems from the plugin fails to clean up and properly escape some imported data, an attacker can use the vulnerability to import malicious podcast files to perform SQL injection attacks.

EPSS

0.001

Percentile

41.1%