WordPress Plugin Vulnerabilities
Give <= 2.5.0 - SQL Injection
Description
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php or includes/donors/class-give-donors-query.php
Affects Plugins
Fixed in 2.5.1 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Tin Duong of Fortinet's FortiGuard Labs
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-08-12 (about 6 years ago)
Added
2019-08-12 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 