Showing 1 vulnerability on this page for opti_marketing

Signals CISA KEV Ransomware Nuclei
optimarketing vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Opti Marketing <= 2.0.9 - Unauthenticated SQLi

The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CWE-89Sep 8, 20241 related artifact
CVSS9.8v3.1EPSS3.29%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX