Lucene search
WpvulndbWPVDB-ID:166B2829-047C-439A-B59C-F5AD194CBAAEHistoryMar 17, 2021 - 12:00 a.m.
Paid Membership Pro < 2.5.6 - Authenticated SQL Injection
2021-03-1700:00:00
wpscan.com
4
0.003 Low
EPSS
Percentile
65.5%
The plugin was affected by an authenticated SQL Injection when filtering users in the dashboard, as the order parameter was not properly validated/sanitised before being added to a SQL statement.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paid-memberships-pro | lt | 2.5.6 |
Related
openvas
openvas
WordPress Paid Memberships Pro Plugin < 2.5.6 SQLi Vulnerability
2023-01-23 00:00:00
jvn
jvn
cve
cve
CVE-2021-20678
2021-03-18 01:15:12
osv
osv
CVE-2021-20678
2021-03-18 01:15:12
cvelist
cvelist
CVE-2021-20678
2021-03-18 00:56:05
nvd
nvd
CVE-2021-20678
2021-03-18 01:15:12
prion
prion
Sql injection
2021-03-18 01:15:00