CVE-2018-16159

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-08-30

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Gift Vouchers (Codemenschen)

References

• https://wpvulndb.com/vulnerabilities/9117
• https://www.exploit-db.com/exploits/45255/