WordPress Nirweb Support <2.8.2 - SQL Injection
WordPress Nirweb support plugin before 2.8.2 contains a SQL injection vulnerability. The plugin does not sanitize and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information from a database, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
nirweb_supportPoC 已收录
CVSS9.8EPSS 82.7%