WordPress Plugin Vulnerabilities

Membermouse < 2.2.9 - Blind SQL Injection

Description

Note: It seems like the affected plugin is the premium version (from https://membermouse.com), the free one has been closed as of v1.2.0

Affects Plugins

Plugin icon
membermouse
Fixed in 2.2.9

References

CVE
CVE-2018-11309

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
57b84197-6b05-4b8e-98e3-888f08d0b67a

Timeline

Publicly Published
2018-05-27 (about 7 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-08-07
Title
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Published
2020-07-02
Title
Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection
Published
2024-05-10
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.105 - Contributor+ SQL Injection
Published
2025-05-01
Title
Advance Seat Reservation Management for WooCommerce < 3.4 - Unauthenticated SQL Injection
Published
2024-10-31
Title
5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection