Lucene search
+L

2 matches found

CNVD
CNVD
•added 2017/10/20 12:00 a.m.•9 views

WordPress Store Locator Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Store Locator plugin is one of the store locator plugin . A SQL injection vulnerability exists in WordPress Sto...

9.8CVSS9.6AI score0.02993EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/16 12:00 a.m.•3 views

CVE-2014-8621: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

9.8CVSS8.6AI score0.02993EPSS
SaveExploits1References2
Rows per page
Query Builder