WordPress Plugin Vulnerabilities
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Description
The plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve information contained in a site’s database.
Affects Plugins
No known fix References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
p7e4
Verified
No
WPVDB ID
Timeline
Publicly Published
2021-09-08 (about 4 years ago)
Added
2021-09-09 (about 4 years ago)
Last Updated
2022-04-09 (about 3 years ago)
WPScan 