Ultimate Wordpress Auction Plugin
1 CVEs
product
Monthly
The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
WordPress
SQLi
Ultimate Wordpress Auction Plugin
PHP
NVD
CVSS 3.1
7.5
EPSS
0.3%
EPSS 0%
CVSS 7.5
HIGH
This Week
The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
WordPress
SQLi
Ultimate Wordpress Auction Plugin
+1
NVD