Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 6.5%
exploitation probability
6.5%top 7% of all CVEs
observed exploitation
nono source reports it
The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue
Affected products
Unknown · Paytm – Donation Plugin