Lucene search

K
patchstackKunal Sharma (University of Kaiserslautern) and Daniel Krohmer (Fraunhofer IESE)PATCHSTACK:4A72CC011389CAA3550356F70665DE1A
HistoryNov 02, 2022 - 12:00 a.m.

WordPress OWM Weather plugin <= 5.6.8 - Auth. SQL Injection (SQLi) vulnerability

2022-11-0200:00:00
Kunal Sharma (University of Kaiserslautern) and Daniel Krohmer (Fraunhofer IESE)
patchstack.com
10
wordpress
owm weather plugin
sql injection
kunal sharma
daniel krohmer
university of kaiserslautern
fraunhofer iese
update
software

EPSS

0.001

Percentile

45.2%

Auth. SQL Injection (SQLi) vulnerability discovered by Kunal Sharma (University of Kaiserslautern) and Daniel Krohmer (Fraunhofer IESE) in the WordPress OWM Weather plugin (versions <= 5.6.8).

Solution

           Update the WordPress OWM Weather plugin to the latest available version (at least 5.6.9).

EPSS

0.001

Percentile

45.2%

Related for PATCHSTACK:4A72CC011389CAA3550356F70665DE1A