PT-2023-14646 · Thimpress · Thimpress Wp Pipes
CVSS v3.1
8.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
ThimPress WP Pipes plugin versions prior to 1.34
Description
The issue is related to an SQL Injection vulnerability in the ThimPress WP Pipes plugin, which can be exploited by authenticated administrators. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized data access or modification.
Recommendations
For ThimPress WP Pipes plugin versions prior to 1.34, update to version 1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's administrative features to minimize the risk of exploitation.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Thimpress Wp Pipes