2 matches found
CVE-2017-18614
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...
9.3CVSS8.6AI score0.0201EPSS
SaveExploits2References2
CVE-2017-18614
CVE-2017-18614 affects the WordPress plugin kama-clic-counter (v3.4.9) . Multiple connected sources confirm a SQL injection vulnerability exposed via the plugin’s admin.php, specifically the order parameter . The root cause is described as a lack of validation of externally entered SQL statements...
9.3CVSS8.5AI score0.0201EPSS
SaveExploits2References2Affected Software1
20