CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection. This issue affects Click & Pledge Connect Plugin: from 2.24080000 through WP6.6.1.
Explanation of Vulnerability in Simple Terms
The Click & Pledge Connect Plugin contains a SQL injection vulnerability that allows unauthenticated attackers to modify database content over the network. No user interaction is required. The vulnerability affects versions 2.24080000 through WP6.6.1. Attackers can alter site data, though they cannot read sensitive information through this flaw.
What an attacker can do
Modify or delete database records without authentication.
Potential impact on your site
Site data can be corrupted or deleted by remote attackers; site functionality may be disrupted.
Conditions required to exploit
Network access only; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
