CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

WordPress PayPal Pro <1.1.65 - SQL Injection

WordPress PayPal Pro plugin before 1.1.65 is susceptible to SQL injection via the 'query' parameter which allows for any unauthenticated user to perform SQL queries with the results output to a web page in JSON format. id: CVE-2020-14092 info: name: WordPress PayPal Pro 1.1.65 - SQL Injection...

9.8CVSS7.1AI score0.9453EPSS

Exploits1References5

RedhatCVE•added 2025/05/22 3:55 p.m.•8 views

CVE-2020-14092

The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection...

9.8CVSS7.7AI score0.9453EPSS

Exploits1

NVD•added 2020/07/02 4:15 p.m.•20 views

CVE-2020-14092

The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection...

9.8CVSS0.9453EPSS

Exploits1References3

CVE•added 2020/07/02 3:20 p.m.•78 views

CVE-2020-14092

Summary: CVE-2020-14092 affects the WordPress plugin “CodePeople Payment Form for PayPal Pro” up to version 1.1.65. The vulnerability is an SQL injection via the vulnerable plugin’s query parameter, allowing unauthenticated attackers to execute arbitrary SQL and have results output in JSON. The C...

9.8CVSS9.7AI score0.9453EPSS

Exploits1References3Affected Software1