CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

CVE-2020-27481

The Good Layers LMS Plugin (version 2.1.4 and earlier ) for WordPress is vulnerable to an unauthenticated SQL Injection . The flaw occurs because the plugin uses the wp_ajax_nopriv call to expose the gdlr_lms_cancel_booking function, which processes the id POST parameter directly in a SQL query w...

CVE-2020-27481: Improper Neutralization of Special Elements used in an SQL Command

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

PT-2020-16690

Name of the Vulnerable Software and Affected Versions Good Layers LMS Plugin versions 2.1.4 and earlier Description The issue is related to an unauthenticated SQL Injection vulnerability. It exists due to the usage of "wp ajax nopriv" call in WordPress, allowing any unauthenticated user to access...

VulnCheck KEV: CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...