967 matches found
CVE-2019-13578
The CVE-2019-13578 entry affects the WordPress plugin Impress GiveWP Give (GiveWP) up to version 2.5.0, with the vulnerability located in includes/payments/class-payments-query.php. Exploitation allows remote execution of arbitrary SQL commands, implying a SQL injection affecting authentication/a...
CVE-2019-13578
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
CVE-2019-13578: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
Give <= 2.5.0 - SQL Injection
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php or...
Give < 2.4.7 - Stored XSS
The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin was affected by a Stored XSS security vulnerability...