Showing 1 vulnerability on this page for cryptocurrency_widgets_pack

Signals CISA KEV Ransomware Nuclei
Blocksera vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi

The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CWE-89Jan 2, 20231 related artifact
CVSS9.8v3.1EPSS4.8%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX