Skip to content
OpenAdvisories

Vendor

2wstechnologies

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.9

    Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter

    The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results) in all versions up to, and including, 3.0. This is due to the askeet_is_safe_query() fi…