CVE-2017-12946

The CVE-2017-12946 issue affects the WordPress Easy Modal plugin prior to 2.1.0. The vulnerability is an SQL injection in a delete action (parameters: id, ids, or modal) passed to wp-admin/admin.php, and is exploitable by users with administrative access. In practice, an authenticated administrat...

CVE-2017-12947

The CVE-2017-12947 entry corresponds to the WordPress Easy Modal plugin (versions before 2.1.0). The vulnerability is an SQL injection in the untrash action via wp-admin/admin.php, exploitable by administrators. Affected component: classes\controller\admin\modals.php. The available sources descri...