CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.This issue affects Couponis - Affiliate & Submitting Coupons WordPress Theme: from n/a before 2.2.
Explanation of Vulnerability in Simple Terms
The Couponis WordPress theme contains a SQL injection vulnerability in versions before 2.2. An attacker can craft malicious input to execute arbitrary SQL queries against the site's database without authentication. This allows reading sensitive data like user credentials and site configuration. The vulnerability affects the entire site scope and can also cause service disruption.
What an attacker can do
Read or modify database contents, including user passwords and site configuration, without logging in.
Potential impact on your site
Attackers can steal user data, modify site content, or disrupt the site's availability without needing a WordPress account.
Conditions required to exploit
None. The attacker can exploit this remotely over the network without any credentials or user interaction.
Key dates
External resources
Related vulnerabilities
