Lucene search

K
wpvulndbWpvulndbWPVDB-ID:37914AF2-6827-49DB-ABDC-862975B2CACD
HistoryNov 17, 2023 - 12:00 a.m.

Donations Made Easy - Smart Donations <= 4.0.12 - Admin+ SQLi

2023-11-1700:00:00
wpscan.com
1
donations
sql injection
high privilege users
admin plus
security vulnerability
smart donations plugin

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

Related for WPVDB-ID:37914AF2-6827-49DB-ABDC-862975B2CACD