Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2021/08/23 12:15 p.m.•9 views

CVE-2021-24551

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jaleditcomments GET parameter before using it in a SQL statement, leading to a SQL injection issue...

9.8CVSS7.2AI score0.01911EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/08/23 12:00 a.m.•19 views

Wordpress Plugin Edit Comments SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. Wordpress Plugin Edit Comments suffers from a SQL...

9.8CVSS8.5AI score0.01911EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2021/07/24 12:00 a.m.•144 views

WordPress Edit Comments plugin <= 0.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by Shreya Pohekar in WordPress Edit Comments plugin versions = 0.3. Solution This plugin has been closed as of June 2, 2021 and is not available for download. Reason: Security Issue...

9.8CVSS3.5AI score0.01911EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder