Watupro

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-9834 CRITICAL POC THREAT Emergency

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

WordPress SQLi PHP Watupro

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

12.5%

CVE-2017-9834

EPSS 12% CVSS 9.8

CRITICAL POC THREAT Emergency

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

WordPress SQLi PHP +1

NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy