Lucene search

K
cvelistMitreCVELIST:CVE-2013-1408
HistoryMar 24, 2014 - 2:00 p.m.

CVE-2013-1408

2014-03-2414:00:00
mitre
raw.githubusercontent.com
1

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.8%

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.8%