2 matches found
Sql injection
SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...
7.5CVSS9.1AI score0.04069EPSS
SaveExploits3References2Affected Software1
CVE-2017-9834: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...
9.8CVSS6.4AI score0.04069EPSS
SaveExploits3References2
20