CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n/a through 1.20.23.
Explanation of Vulnerability in Simple Terms
E2Pdf versions up to 1.20.23 contain a SQL injection vulnerability in the plugin's database queries. An attacker with administrator privileges can inject malicious SQL code to read sensitive data from the WordPress database. The vulnerability requires high-level access and does not allow data modification, but can expose user information and site configuration details.
What an attacker can do
Read sensitive data from the WordPress database by injecting SQL commands.
Potential impact on your site
Site admins with compromised accounts could have user data and configuration exposed via database queries.
Conditions required to exploit
Attacker must have WordPress administrator privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
