CVE-2020-8596

Published: 2020-02-11T12:15Z

Last Modified: 2024-11-21T05:39Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are met). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt