CVE-2018-16159
45Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 24%
from disclosure to weapon
Published on NVDAug 30
VulnCheck+1914d
exploitation probability
24%top 2% of all CVEs
observed exploitation
yesVulnCheck
The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.
Affected products
n/a · n/a