PT-2022-13437

Name of the Vulnerable Software and Affected Versions The Title Experiments Free WordPress plugin versions prior to 9.0.1 Description The issue concerns an unauthenticated SQL injection. It occurs because the id parameter is not properly sanitised and escaped before being used in a SQL statement...

WordPress plugin Title Experiments Free SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Title Experiments Free plugin version 9.0.1 prior to the SQL injection vulnerability, the vulnerability stems from the use o...

CVE-2022-0784: Improper Neutralization of Special Elements used in an SQL Command

The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

Title Experiments Free < 9.0.1 - Unauthenticated SQLi

The plugin does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection PoC curl 'https://example.com/wp-admin/admin-ajax.php' --data 'action=wpextitles=1 AND SELECT...