PT-2026-84640 · WordPress · Wpvivid
CVSS v3.1
4.1
متوسطة
| المتجه | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WPvivid — Backup, Migration & Staging WordPress plugin versions prior to 0.9.133
Description
Administrators can perform SQL injection attacks because the plugin fails to sanitize a user-supplied list of identifiers before incorporating them into a SQL query. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database.
Recommendations
Update the plugin to version 0.9.133 or later.
استغلال
إصلاح
SQL injection
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Wpvivid