Mls On The Fly
Monthly
SQL injection in the WordPress plugin MLS On The Fly (Favethemes) affects versions up to and including 1.8.1.5 and lets a logged-in subscriber-level user inject arbitrary SQL through a plugin endpoint, with the CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L, score 8.5) indicating high confidentiality impact, low availability impact and a scope change beyond the vulnerable component. The attack is remote and needs no user interaction, but the low-privilege authentication prerequisite is the practical gate: exploitation is trivial on sites that allow open registration and blocked for anonymous attackers on sites that do not. No public exploit has been identified at time of analysis and the issue is not in CISA KEV; the specific vulnerable parameter or endpoint is not described in the available sources.
SQL injection in the WordPress plugin MLS On The Fly (Favethemes) affects versions up to and including 1.8.1.5 and lets a logged-in subscriber-level user inject arbitrary SQL through a plugin endpoint, with the CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L, score 8.5) indicating high confidentiality impact, low availability impact and a scope change beyond the vulnerable component. The attack is remote and needs no user interaction, but the low-privilege authentication prerequisite is the practical gate: exploitation is trivial on sites that allow open registration and blocked for anonymous attackers on sites that do not. No public exploit has been identified at time of analysis and the issue is not in CISA KEV; the specific vulnerable parameter or endpoint is not described in the available sources.