CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8.
Explanation of Vulnerability in Simple Terms
The iPages Flipbook For WordPress plugin through version 1.4.8 contains a SQL injection vulnerability in a database query. An attacker with administrator privileges can craft a malicious request to extract sensitive data from the WordPress database. The vulnerability requires high-level access and does not affect data integrity, but can compromise confidentiality and cause minor availability issues.
What an attacker can do
Read sensitive data from the WordPress database, including user information and configuration details.
Potential impact on your site
An administrator account compromise could expose your database contents; update the plugin immediately.
Conditions required to exploit
Attacker must have WordPress administrator account access; no user interaction required.
Key dates
External resources
Related vulnerabilities
