Gutentor
1 CVEs
product
Monthly
The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
SQLi
Gutentor
PHP
NVD
WPScan
CVSS 3.1
4.1
EPSS
0.2%
EPSS 0%
CVSS 4.1
MEDIUM
POC
This Month
The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
SQLi
Gutentor
+1
NVD
WPScan