WordPress Plugin Vulnerabilities
Simple Download Monitor < 3.8.9 - SQL Injection
Description
Gen Sato of Mitsui Bussan Secure Directions, discovered an Authenticated (admin+) SQL Injection issue, which could result in an arbitrary SQL command executed if a user accesses a specially crafted URL while logged in.
Affects Plugins
Fixed in version 3.8.9
References
Classification
Miscellaneous
Original Researcher
Gen Sato of Mitsui Bussan Secure Directions
Verified
No
Timeline
Publicly Published
2020-10-21 (about 2 years ago)
Added
2020-10-21 (about 2 years ago)
Last Updated
2020-10-23 (about 2 years ago)