58 matches found
CVE-2022-0254
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
CVE-2022-0254
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
CVE-2022-0254
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
Sql injection
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
CVE-2022-0254 Zero Spam < 5.2.11 - Admin+ SQL Injection
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
CVE-2022-0254
WordPress Zero Spam plugin is vulnerable to SQL injection in admin dashboard due to improper sanitisation/escaping of order and orderby parameters. Affected versions are before 5.2.11 (noted by CVE records; Red Hat references 5.2.11; other advisories mention up to 5.2.13). The root cause is unsaf...
PT-2022-13072
Name of the Vulnerable Software and Affected Versions WordPress Zero Spam WordPress plugin versions prior to 5.2.11 Description The issue arises from the improper sanitization and escaping of the order and orderby parameters before they are used in a SQL statement within the admin dashboard,...
CVE-2022-0254: Improper Neutralization of Special Elements used in an SQL Command
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...
WordPress plugin SQL注入漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress Zero Spam plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of WordPress Zero Spam plugin prior to 5.2.11. The vulnerability stems from t...
Zero Spam < 5.2.11 - Admin+ SQL Injection
The plugin does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection With at least one IP in the “Blocked IPs” list:...
Zero Spam < 5.2.11 - Admin+ SQL Injection
The plugin does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection PoC With at least one IP in the “Blocked IPs” list:...
WordPress Zero Spam plugin <= 5.2.9 - SQL injection (SQLi) vulnerability
SQL injection SQLi vulnerability discovered in WordPress Zero Spam plugin versions = 5.2.9. Solution Update the WordPress Zero Spam plugin to the latest available version at least 5.2.10...
WordPress Zero Spam plugin <= 5.2.9 - SQL injection (SQLi) vulnerability
SQL injection SQLi vulnerability discovered in WordPress Zero Spam plugin versions = 5.2.9. Solution Update the WordPress Zero Spam plugin to the latest available version at least 5.2.10...
WordPress Zero Spam <= 2.1.1 - unauthorized blind
No description provided by source...
WordPress Zero Spam Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Zero Spam plugin suffers from a SQL injection vulnerability due to the program failing to adequatel...
WordPress Zero Spam <= 2.1.1 - Unauthenticated Blind SQL Injection
The WordPress Zero Spam WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability. PoC HTTP request header: Client-IP: '+select0fromselectsleep10v+'...