Skip to main content

Smart Google Code Inserter

2 CVEs product

Monthly

CVE-2018-3811 Jan 01, 06:29 CRITICAL POC THREAT Act Now

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi Google Wordpress Plugin +1
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
42.9%
CVE-2018-3810 Jan 01, 06:29 CRITICAL POC THREAT Act Now

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Authentication Bypass Google Wordpress Plugin +1
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
91.5%
EPSS 43% CVSS 9.8
CRITICAL POC THREAT Act Now

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi +3
NVD Exploit-DB
EPSS 91% CVSS 9.8
CRITICAL POC THREAT Act Now

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Authentication Bypass +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy