Lucene search
NawafWPVDB-ID:8B7CB8BC-207E-4E8B-9772-BDF678E8603EHistoryApr 28, 2020 - 12:00 a.m.
WP-Advanced-Search < 3.3.7 - Authenticated SQL Injection
2020-04-2800:00:00
Nawaf
wpscan.com
10
0.001 Low
EPSS
Percentile
36.9%
The import functionality to restore plugin settings within the admin pages was vulnerable to SQL Injection through a privileged user with the edit_posts capability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-advanced-search | lt | 3.3.7 |
Related
nvd
nvd
CVE-2020-12104
2020-05-05 15:15:12
prion
prion
Sql injection
2020-05-05 15:15:00
cvelist
cvelist
CVE-2020-12104
2020-05-05 14:17:40
cve
cve
CVE-2020-12104
2020-05-05 15:15:12