CVE-2019-13578

2019-08-1516:15:11

Google

osv.dev

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%

JSON

A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php.

CPENameOperatorVersion
giveeq1.4.2
giveeq1.0
giveeq2.3.0
giveeq1.6.1
giveeq1.8.3
giveeq1.8.17
giveeq1.4.1
giveeq1.6.3
giveeq2.4.3
giveeq1.7.1

Name	Operator	Version
give	eq	1.4.2
give	eq	1.0
give	eq	2.3.0
give	eq	1.6.1
give	eq	1.8.3
give	eq	1.8.17
give	eq	1.4.1
give	eq	1.6.3
give	eq	2.4.3
give	eq	1.7.1

Rows per page:

1-10 of 791

References

fortiguard.com/zeroday/FG-VD-19-098

github.com/impress-org/give/commit/894937d7927eab0c98457656cbd6fb414b3a6fbf

github.com/impress-org/give/commit/97b9b5fae2d10742ee42fe00092729fa7da3cb32

github.com/impress-org/give/commit/d91f4c6dcc92aeb826b060cb2feadd56885f4cea

wpvulndb.com/vulnerabilities/9504