Lucene search

K
patchstackHassan Khan Yusufzai (Splint3r7)PATCHSTACK:A6D39BE81759E4A6DAF24856CFA1E86A
HistoryMay 04, 2022 - 12:00 a.m.

WordPress StaffList plugin <= 3.1.2 - Authenticated SQL Injection (SQLi) vulnerability

2022-05-0400:00:00
Hassan Khan Yusufzai (Splint3r7)
patchstack.com
18

0.006 Low

EPSS

Percentile

78.4%

Authenticated SQL Injection (SQLi) vulnerability discovered by Hassan Khan Yusufzai in WordPress StaffList plugin (versions <= 3.1.2).

Solution

           Update the WordPress StaffList plugin to the latest available version (at least 3.1.5).
CPENameOperatorVersion
stafflistle3.1.2

0.006 Low

EPSS

Percentile

78.4%

Related for PATCHSTACK:A6D39BE81759E4A6DAF24856CFA1E86A