WP User Merger vulnerabilities
We track 1 vulnerability in WP User Merger products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 28, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest WP User Merger vulnerabilities
- 8.8 High severity
WP User Merger: Improper Neutralization of Special Elements used in an SQL Command
The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin