amtyThumb vulnerabilities
We track 1 vulnerability in amtyThumb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest amtyThumb vulnerabilities
- 8.8 High severity
amtyThumb: Improper Neutralization of Special Elements used in an SQL Command
The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and not just Author+ like the original advisor