Lucene search
WpvulndbWPVDB-ID:9B62AD7A-3C0A-4A87-9DB5-60122912C3DBHistoryOct 02, 2023 - 12:00 a.m.
Most Popular Posts Widget < 0.9 - Admin+ SQL injection
2023-10-0200:00:00
wpscan.com
1
sql injection
widget
admin+
logs
validation
software
Description The plugin does not properly validate and escape the “orderby” GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 0.9 |
Related
cve
cve
CVE-2015-10124
2023-10-02 14:15:09
prion
prion
Sql injection
2023-10-02 14:15:00
nvd
nvd
CVE-2015-10124
2023-10-02 14:15:09
cvelist
cvelist
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.5%
Related for WPVDB-ID:9B62AD7A-3C0A-4A87-9DB5-60122912C3DB