Lucene search
WpvulndbWPVDB-ID:EBA90D3E-8968-41F9-8DC9-91D87A2CD527HistoryFeb 17, 2023 - 12:00 a.m.
WP Coder < 2.5.4 - Admin+ SQLi
2023-02-1700:00:00
wpscan.com
13
wordpress
coder
sqli
vulnerability
admin
exploitable
EPSS
0.001
Percentile
29.1%
The plugin does not properly sanitise and escape the id parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Related
cvelist
cvelist
CVE-2023-0895
2023-02-17 16:57:27
prion
prion
Sql injection
2023-02-17 17:15:00
nvd
nvd
CVE-2023-0895
2023-02-17 17:15:11
cve
cve
CVE-2023-0895
2023-02-17 17:15:11
wordfence
wordfence