Lucene search
Margaux Dabert (Intrinsec)PATCHSTACK:EC47D3B8CFB901CB76C4AF9ADDD75602HistoryOct 05, 2021 - 12:00 a.m.
WordPress WP Bannerize plugin 2.0.0 – 4.0.2 - Authenticated SQL Injection (SQLi) vulnerability
2021-10-0500:00:00
Margaux Dabert (Intrinsec)
patchstack.com
8
0.001 Low
EPSS
Percentile
27.0%
Authenticated SQL Injection (SQLi) vulnerability discovered by Margaux Dabert (Intrinsec) in WordPress WP Bannerize plugin (versions <= 2.0.0 – 4.0.2).
Solution
Deactivate and delete. This plugin has been closed as of July 19, 2021 and is not available for download. Reason: Security Issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp bannerize | ge | 2.0.0 | |
| wp bannerize | le | 4.0.2 |
Related
cve
cve
CVE-2021-39351
2021-10-06 16:15:07
wpvulndb
wpvulndb
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
2021-10-05 00:00:00
prion
prion
Sql injection
2021-10-06 16:15:00
cvelist
cvelist
CVE-2021-39351 WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
2021-10-05 00:00:00
nvd
nvd
CVE-2021-39351
2021-10-06 16:15:07