CVE-2017-20245

HIGH

Wow Viral Signups 2.1 WordPress Plugin SQL Injection

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-20245 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the 'idsignup' parameter to read arbitrary data from the database.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 9, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Wow Viral Signups

Browse Wow-Company / Wow Viral Signups
CVE List2.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Wow Viral Signups 2.1 - SQL InjectionExploitDB exploitby TAD GROUPNot analyzed1 file
ExploitDB
PoC details

References

6