Lucene search
+L

6 matches found

CNVD
CNVD
•added 2022/06/13 12:00 a.m.•61 views

WordPress Logo Slider plugin SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Logo Slider plugin 1.4.8 and earlier versions are vulnerable to SQL injection, which stems...

4CVSS1.7AI score0.00795EPSS
SaveExploits2References1
OSV
OSV
•added 2022/06/08 10:15 a.m.•10 views

CVE-2022-1687

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lspsliderid parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection...

2.7CVSS5.8AI score0.00795EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/06/08 10:15 a.m.•10 views

CVE-2022-1687

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lspsliderid parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection...

4CVSS5.9AI score0.00795EPSS
SaveExploits2References3
Prion
Prion
•added 2022/06/08 10:15 a.m.•29 views

Sql injection

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lspsliderid parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection...

4CVSS4.5AI score0.00795EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2022/06/08 12:00 a.m.•14 views

WordPress plugin Logo Slider SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Logo Slider plugin 1.4.8 and earlier versions are vulnerable to SQL injection, which stems...

4CVSS6.1AI score0.00795EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/06 12:00 a.m.•2 views

CVE-2022-1687: Improper Neutralization of Special Elements used in an SQL Command

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lspsliderid parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection...

4CVSS5.6AI score0.00795EPSS
SaveExploits2References2
Rows per page
Query Builder