CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

PT-2020-16690

Name of the Vulnerable Software and Affected Versions Good Layers LMS Plugin versions 2.1.4 and earlier Description The issue is related to an unauthenticated SQL Injection vulnerability. It exists due to the usage of "wp ajax nopriv" call in WordPress, allowing any unauthenticated user to access...