PRODUCT PROFILE

cryptocurrency_widgets_pack

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2022-445882026/02/26

Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection

Cryptocurrency Widgets Pack Plugin <=1.8.1 for WordPress contains an unauthenticated SQL injection caused by unsanitized user input in database queries, letting attackers execute arbitrary SQL commands, exploit requires no authentication.

cryptocurrency_widgets_packPoC 已收录

CVSS—

严重CVE-2022-40592023/01/03

Cryptocurrency Widgets Pack < 2.0 - SQL Injection

The plugin does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

cryptocurrency_widgets_packPoC 已收录

CVSS9.8EPSS 82.5%