Sql injection

2022-04-2817:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

JSON

Authenticated SQL Injection (SQLi) vulnerability in Mufeng’s Hermit ??? plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).

CPENameOperatorVersion
hermitle3.1.6

CPE	Name	Operator	Version
	hermit	le	3.1.6

References

patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-authenticated-sql-injection-sqli-vulnerability

wordpress.org/plugins/hermit/