23 matches found
PT-2017-13652
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.8.2 Description The issue arises from the mishandling of % characters and additional placeholder values in $wpdb-prepare, which could enable SQL injection attacks if plugins or themes are not properly secured...
9.8CVSS0.06518EPSS
SaveExploits1References33
WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection
...
7.5CVSS8.2AI score0.06518EPSS
SaveExploits1References3Affected Software1
WordPress AdRotate plugin <= 3.6.6 - SQL Injection
No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...
7.1AI score
SaveExploits0
20