CVE-2020-5766

creationtimestamp| type| source ---|---|--- 2025-06-09 10:26:51+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-5766.yaml 2025-06-10 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qxngf22...

CVE-2020-5766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields...

SQL Injection Over HTTP Traffic (CVE-2020-11530; CVE-2020-17463; CVE-2020-17506; CVE-2020-25990; CVE-2020-27481; CVE-2020-5766; CVE-2020-8655; CVE-2020-8656; CVE-2020-9465)

SQL Injection Over HTTP Traffic...

WordPress Plugin 'SRS Simple Hits Counter' Information Disclosure

The WordPress application running on the remote host has a version of the 'SRS Simple Hits Counter' plugin that is affected by an information disclosure vulnerability due to improper validation of user supplied input data. An unauthenticated, remote attacker can exploit this issue via specially...

CVE-2020-5766

The SRS Simple Hits Counter plugin for WordPress (versions 1.0.3 and 1.0.4 ) is vulnerable to a blind SQL injection due to the improper neutralization of special elements used in SQL commands. This flaw allows a remote, unauthenticated attacker to determine the value of database fields and potent...