Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B36D20DE-F23A-4DA7-B7B7-C5236A3F1E47
HistoryNov 16, 2023 - 12:00 a.m.

ImageLinks Interactive Image Builder < 1.6.0 - Admin+ SQLi

2023-11-1600:00:00
wpscan.com
6
imagelinks sqli admin high-privilege

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

CPENameOperatorVersion
eq1.6.0

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Related for WPVDB-ID:B36D20DE-F23A-4DA7-B7B7-C5236A3F1E47