CVE-2016-11000

The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...

CVE-2016-11000

CVE-2016-11000 affects the WordPress plugin wp-ultimate-exporter (versions up to 1.1). The vulnerability is an SQL injection in the export_type_name parameter, with CVSS vectors indicating high/moderate impact (CVSS v3.1: CRITICAL, 9.8; CVSS v2.0: HIGH, 7.5). The reports confirm the vulnerable co...