This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-0769 | BDVDB-2026-174756 Detail

Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin

Description#

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.