CVE-2020-8596

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the…

published February 10, 2020

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are met).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01624 · 75.8th percentile
Published
2020-02-10T21:37Z
EPSS history
Timeline
  • 10 FEB 21:37Z
    participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the…
    cvelistv5