Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•3 views

CVE-2023-23488: Improper Neutralization of Special Elements used in an SQL Command

The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...

9.8CVSS5.9AI score0.9246EPSS
SaveExploits6References3
VulnCheck KEV
VulnCheck KEV
•added 2023/01/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2023-23488

The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...

9.8CVSS8AI score0.9246EPSS
SaveIn wildExploits6References3
Rows per page
Query Builder