CVE-2017-18573 Simple Login Log < 1.1.2 - SQL Injection

CriticalCVSS 9.8 EPSS 1.8%

Description

The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.

Product	Affected versions	Fixed in
simplerealtytheme simple login log	< 1.1.2	1.1.2
wordpress simple-login-log(WordPress)	< 1.1.2	1.1.2

9.8 Critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

All scores (3)

EPSS (exploitation probability, 30 days): 1.80% (percentile 78.8)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.