CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in iDo8p WPMU Prefill Post wpmu-prefill-post allows SQL Injection.This issue affects WPMU Prefill Post: from n/a through <= 1.02.
Explanation of Vulnerability in Simple Terms
WPMU Prefill Post versions 1.02 and earlier contain a SQL injection vulnerability accessible to high-privilege users. An attacker with administrator or editor access can craft malicious input to execute arbitrary SQL queries against the site database. This can lead to unauthorized data disclosure and potential database disruption. Update to a version newer than 1.02.
What an attacker can do
Read or modify database contents via SQL injection if they have admin/editor access.
Potential impact on your site
Admins and editors could be tricked or compromised to inject SQL; database data exposure and corruption possible.
Conditions required to exploit
Attacker must have high-privilege account (administrator or editor role) on the WordPress site.
Key dates
External resources
Related vulnerabilities
