SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. WordPress Paid Memberships Pro <2.9.8 - Blind SQL InjectionCVE-2023-23488Strangerstudios · CVSS 9.8 · 92% likely

   CWE-89

2. WordPress Paid Memberships Pro <2.6.7 - Blind SQL InjectionCVE-2021-25114Strangerstudios · 82% likely

   CWE-89

3. Paid Memberships Pro < 2.9.12 - Subscriber+ SQL InjectionCVE-2023-0631Strangerstudios · 60% likely

   CWE-89

4. SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2021-20678Stranger Studios · 2.0% likely

   CWE-89

5. SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.CVE-2020-5579Stranger Studios · 1.2% likely

   CWE-89

6. Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLiCVE-2024-1287Strangerstudios · CVSS 6.5 · 0.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.