Sql injection

2023-01-0222:15:00

PRIOn knowledge base

www.prio-n.com

cryptocurrency

widgets

sql injection

wordpress

ajax action

unauthenticated users

vulnerability

0.024 Low

EPSS

Percentile

90.0%

JSON

The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CPENameOperatorVersion
cryptocurrency_widgets_packle1.8.1

CPE	Name	Operator	Version
	cryptocurrency_widgets_pack	le	1.8.1

References

wpscan.com/vulnerability/d94bb664-261a-4f3f-8cc3-a2db8230895d

0.024 Low

EPSS

Percentile

90.0%

JSON

Related for PRION:CVE-2022-4059