CVE-2016-10942

The CVE-2016-10942 affects the Podlove Podcasting Plugin for WordPress (before 2.3.16). The vulnerability is a SQL injection via the insert_id parameter that is exploitable via CSRF. Public descriptions in Red Hat/NVD/osv etc. confirm the issue; CVSS scores indicate high to critical impact (C/H I...

CVE-2016-10942: Improper Neutralization of Special Elements used in an SQL Command

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...