CVE-2017-9834

Published: 2017-09-07T14:29Z

Last Modified: 2024-11-21T03:36Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt