Lucene search

K
cvelistWPScanCVELIST:CVE-2023-0631
HistoryMar 20, 2023 - 3:52 p.m.

CVE-2023-0631 Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection

2023-03-2015:52:10
WPScan
raw.githubusercontent.com
1

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%