Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06535
HistoryApr 27, 2022 - 12:00 a.m.

WordPress plugin Master Elements SQL injection vulnerability

2022-04-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.024 Low

EPSS

Percentile

89.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Master Elements 8.0 and earlier versions are vulnerable to SQL injection, which stems from the plugin’s failure to validate and escape its remove_post_meta_ condition AJAX operation’s meta_ids parameter. condition AJAX operation’s meta_ids parameter. An attacker could exploit this vulnerability for SQL injection.

CPENameOperatorVersion
devbunch master elementsle8.0

0.024 Low

EPSS

Percentile

89.9%