CVE-2017-9834

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...

PT-2017-19206

Name of the Vulnerable Software and Affected Versions WatuPRO plugin versions prior to 5.5.3.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the watupro questions parameter in a watupro submit action to the "/wp-admin/admin-ajax.ph...