Lucene search
WpvulndbWPVDB-ID:ECCCE0DE-0752-4EDE-A0AB-DE58CB868899HistoryNov 24, 2021 - 12:00 a.m.
Hide My WP < 6.2.4 - Unauthenticated SQL Injection
2021-11-2400:00:00
wpscan.com
16
0.002 Low
EPSS
Percentile
53.2%
The plugin does not escape the IP address (retrieved via headers such as X-Forwarded-For) before using it in a SQL statement, leading to an SQL injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| hide_my_wp | lt | 6.2.4 |
Related
cve
cve
CVE-2021-36916
2021-11-24 17:15:07
cvelist
cvelist
nvd
nvd
CVE-2021-36916
2021-11-24 17:15:07
patchstack
patchstack
prion
prion
Sql injection
2021-11-24 17:15:00
checkpoint_advisories
checkpoint_advisories
WordPress Hide My WP Plugin SQL Injection (CVE-2021-36916)
2021-12-21 00:00:00