high8.8
CVE-2016-10950
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
Impact
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sirv | Sirv | before 1.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lenonleite.com.br/en/2016/11/10/sirv-1-3-1-plugin-for-wordpress/
- https://wordpress.org/plugins/sirv/#developers
- https://wpvulndb.com/vulnerabilities/8673
- http://lenonleite.com.br/en/2016/11/10/sirv-1-3-1-plugin-for-wordpress/
- https://wordpress.org/plugins/sirv/#developers
- https://wpvulndb.com/vulnerabilities/8673