CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.
Explanation of Vulnerability in Simple Terms
The Greenshift Query and Meta Addon for WordPress contains a SQL injection vulnerability in versions before 3.9.2. An authenticated user with low privileges can craft malicious input to execute arbitrary SQL queries against the site's database. This can expose sensitive data or disrupt database operations. Update to version 3.9.2 or later to fix the issue.
What an attacker can do
Read sensitive database records or disrupt database operations via SQL injection.
Potential impact on your site
Database contents may be exposed or corrupted; site functionality may be disrupted.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
