Skip to content
OpenAdvisories
High · 7.5 CVE-2021-26609 EUVD-2021-13403GHSA-wxc6-647p-vgf6

WordPress Mangboard SQL-Injection vulnerability

Published Oct 26, 2021 · Updated Aug 3, 2024 · Assigned by krcert

Description

A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.

Affected products

VendorProductAffectedFixed
Mangboard WordPress Mangboard 1.9.9 – ≤ 1.9.9 —

References