Page Views Count < 2.4.15 - Unauthenticated SQL Injection
45Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 15%
da publicação à arma
Publicada no NVD7 de mar.
VulnCheck+1188d
probabilidade de exploração
15%top 4% das CVEs
exploração observada
simVulnCheck
The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks
Produtos afetados
Unknown · Page View Count