CVE-2017-12946 | BDVDB-2026-89385 Detail

Description#

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wordpress.org/plugins/easy-modal/#developers
http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf

Exploit#

No public exploit known

History#

Version 12017-08-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.