4 matches found
Sql injection
The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users...
CVE-2022-0773
Vulnerability: Documentor WordPress plugin (versions
CVE-2022-0773: Improper Neutralization of Special Elements used in an SQL Command
The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users...
PT-2022-13429
Name of the Vulnerable Software and Affected Versions Documentor WordPress plugin versions 1.5.3 and earlier Description The issue arises from the failure to sanitize and escape user input before it is interpolated in an SQL statement and then executed, leading to an SQL Injection that can be...