CVE-2016-1000217

Zotpress plugin for WordPress SQLi in zp_get_account()

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-10-06

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Zotpress (Zotpress Project)

References

• http://www.securityfocus.com/bid/93894
• https://wordpress.org/plugins/zotpress/changelog/
• https://wordpress.org/support/topic/sql-injection-in-api_user_id/