CVE-2018-12636

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-06-22

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Security (Ithemes)

References

• https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apac…
• https://wordpress.org/plugins/better-wp-security/#developers
• https://www.exploit-db.com/exploits/44943/