Security Advisory

CVE-2020-8596

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-10 21:37:28

Last updated 2024-08-04 10:03:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are met).

← Browse all CVEs View on cve.org ↗