2 matches found
CVE-2025-2106: Improper Neutralization of Special Elements used in an SQL Command
The ArielBrailovsky-ViralAd plugin for WordPress is vulnerable to SQL Injection via the 'text' and 'id' parameters of the limpia function in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
7.5CVSS5.7AI score0.00445EPSS
SaveExploits0References1
WordPress plugin ArielBrailovsky-ViralAd SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...
7.5CVSS9.2AI score0.00445EPSS
SaveExploits0References4
20