Lucene search

K
patchstackELwauxPATCHSTACK:206BDAC6252174C176879E18499B1FE6
HistoryJun 30, 2009 - 12:00 a.m.

WordPress Related Sites Plugin 2.1 - Blind SQL Injection Vulnerability

2009-06-3000:00:00
eLwaux
patchstack.com
4

0.001 Low

EPSS

Percentile

28.0%

A critical blind SQL vulnerability has been discovered in the WordPress Plugin Related Sites plugin. User input is not being sanitized in BTE_RW_webajax.php file (line 27), therefore the attacker can inject SQL via POST.

Solution

           Update plugin.
CPENameOperatorVersion
related sitesle2.1

0.001 Low

EPSS

Percentile

28.0%

Related for PATCHSTACK:206BDAC6252174C176879E18499B1FE6