6 matches found
CVE-2021-24959
CVE-2021-24959 描述 WP Email Users WordPress 插件版本至 1.7.6 未对 weuselectedusers1 AJAX 动作中的 dataraw 参数进行转义，该动作可供任何已认证用户使用，允许他们执行 SQL 注入攻击。 root@kitploit: CVE CVE-2021-24959 CVSS 8.8 High Publicly Published January 31, 2022 Last Updated January 22, 2024 Researcher Krzysztof Zając - CERT PL 该工具将转储 wpuser...
CVE-2021-24959
The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...
Exploit for SQL Injection in Techspawn Wp-Email-Users
CVE-2021-24959 Description --- The WP Email Users WordPress...
CVE-2021-24959
The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...
Sql injection
The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...
