Description
Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped -idsignup- POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the -idsignup- parameter to read arbitrary data from the database.
CVSS 8.2EPSS 0.27%Risque 0.84
Voir la source- Publication
- 2026-06-09 13:16:34
- Versions concernées
- <2.1
- Type
- Installed app
- Dernière modification
- 2026-07-21 07:10:00
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N