Lucene search

K
patchstackCydavePATCHSTACK:D38C9659A797D64566C8AB92DC454DF5
HistoryMar 29, 2022 - 12:00 a.m.

WordPress Users Ultra plugin <= 3.1.0 - Unauthenticated SQL Injection (SQLi) vulnerability

2022-03-2900:00:00
cydave
patchstack.com
18
wordpress
users ultra
sql injection
vulnerability
deactivation
deletion
closure
temporary
review

EPSS

0.024

Percentile

89.9%

Unauthenticated SQL Injection (SQLi) vulnerability discovered by cydave in WordPress Users Ultra plugin (versions <= 3.1.0).

Solution

Deactivate and delete. This plugin has been closed as of March 14, 2022 and is not available for download. This closure is temporary, pending a full review.

EPSS

0.024

Percentile

89.9%

Related for PATCHSTACK:D38C9659A797D64566C8AB92DC454DF5