Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
40Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 8.5%
from disclosure to weapon
Published on NVDApr 25
VulnCheck+584d
exploitation probability
8.5%top 5% of all CVEs
observed exploitation
yesVulnCheck
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.