Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/11/10 12:00 a.m.•79 views

WordPress Plugin SQL Injection Vulnerability (CNVD-2021-101472)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the server in PHP and MySQL to set up a personal blog site. WordPress Plugin is a WordPress open source application plug-ins. wordpress Plugin Header Footer Code Manager in the...

7.2CVSS1.4AI score0.05208EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/08 6:15 p.m.•33 views

CVE-2021-24791

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

7.2CVSS0.05208EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/11/08 6:15 p.m.•14 views

CVE-2021-24791

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

7.2CVSS7.1AI score0.05208EPSS
SaveExploits2References3
Prion
Prion
•added 2021/11/08 6:15 p.m.•24 views

Sql injection

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

6.5CVSS7AI score0.05208EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•4 views

PT-2021-16286

Name of the Vulnerable Software and Affected Versions: The Header Footer Code Manager WordPress plugin versions prior to 1.1.14 Description: The issue arises from the lack of validation and escaping of the orderby and order request parameters before they are used in a SQL statement when viewing t...

7.2CVSS0.05208EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•3 views

CVE-2021-24791: Improper Neutralization of Special Elements used in an SQL Command

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

7.2CVSS5.9AI score0.05208EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•19 views

WordPress 插件SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the server in PHP and MySQL to set up a personal blog site. WordPress Plugin is a WordPress open source application plug-ins. wordpress Plugin Header Footer Code Manager in the...

7.2CVSS6.2AI score0.05208EPSS
SaveExploits2References2
Rows per page
Query Builder