Lucene search

K
patchstackDaniel Krohmer (Fraunhofer IESE, Germany) and Shi Chen (University of Kaiserslautern, Germany)PATCHSTACK:CBE5C123D9332CBE8E01F6A53B24A530
HistoryMay 12, 2022 - 12:00 a.m.

WordPress CP Image Store with Slideshow plugin <= 1.0.67 - Unauthenticated SQL Injection (SQLi) vulnerability

2022-05-1200:00:00
Daniel Krohmer (Fraunhofer IESE, Germany) and Shi Chen (University of Kaiserslautern, Germany)
patchstack.com
5

0.002 Low

EPSS

Percentile

59.5%

Unauthenticated SQL Injection (SQLi) vulnerability was discovered by Daniel Krohmer (Fraunhofer IESE, Germany) and Shi Chen (University of Kaiserslautern, Germany) in the WordPress CP Image Store with Slideshow plugin (versions <= 1.0.67).

Solution

           Update the WordPress CP Image Store with Slideshow plugin to the latest available version (at least 1.0.68)
CPENameOperatorVersion
cp image store with slideshowle1.0.67

0.002 Low

EPSS

Percentile

59.5%

Related for PATCHSTACK:CBE5C123D9332CBE8E01F6A53B24A530