oss-sec mailing list archives

CVE request: Multiple SQL injection vulnerabilities in GigPress - WordPress plugins.


From: Adrián M. F. <adrimf85 () gmail com>
Date: Wed, 20 May 2015 17:51:04 +0200

Hi!

I discovered multiple SQLi in a WordPress plugin:

* Multiple SQL injection vulnerabilities in GigPress.
* vulnerable version: 2.3.8
* patched version: 2.3.9
* vendor: https://wordpress.org/plugins/gigpress/
* changelog: https://wordpress.org/plugins/gigpress/changelog/

I request a CVE for the same.

Thanks!

A.

Current thread: