CVE-2014-3961
HIGH 7.5EPSS 5.6%
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 5.64% chance of exploitation in the next 30 days, 92th percentile
- Published
- 2014-06-04
- Updated
- 2024-09-16