Givewp Square
1 CVEs
product
Monthly
The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.
WordPress
SQLi
Givewp Square
NVD
CVSS 3.1
6.5
EPSS
0.1%
EPSS 0%
CVSS 6.5
MEDIUM
PATCH
This Month
The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.
WordPress
SQLi
Givewp Square
NVD