Skip to content
OpenAdvisories

Vendor

davejesch

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Database Collation Fix <= 1.2.10 - Unauthenticated SQL Injection via 'force-collation-algorithm' Parameter

    The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied parameter and lack of suffic…