CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file

published May 5, 2020

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01602 · 75.6th percentile
Published
2020-05-05T14:17Z
EPSS history
Timeline
  • 05 MAY 14:17Z
    The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file
    cvelistv5