CVE-2020-5766

creationtimestamp| type| source ---|---|--- 2025-06-09 10:26:51+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-5766.yaml 2025-06-10 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qxngf22...

CVE-2020-5766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields...

SQL Injection Over HTTP Traffic (CVE-2020-11530; CVE-2020-17463; CVE-2020-17506; CVE-2020-25990; CVE-2020-27481; CVE-2020-5766; CVE-2020-8655; CVE-2020-8656; CVE-2020-9465)

SQL Injection Over HTTP Traffic...

WordPress Plugin 'SRS Simple Hits Counter' Information Disclosure

The WordPress application running on the remote host has a version of the 'SRS Simple Hits Counter' plugin that is affected by an information disclosure vulnerability due to improper validation of user supplied input data. An unauthenticated, remote attacker can exploit this issue via specially...

CVE-2020-5766

The CVE-2020-5766 entry affects the WordPress plugin SRS Simple Hits Counter (versions 1.0.3–1.0.4). The connected nuclei template confirms an unauthenticated blind SQL injection in the plugin’s post_id flow, enabling an attacker to extract database field values. Root cause: improper handling/neu...