← Back to CVE List

CVE-2020-13640

Published: 2020-06-18T15:15Z
Last Modified: 2024-11-21T05:01Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. (No 7.x versions are affected.) > MITRE Terms of Use apply – see LICENSE‑MITRE.txt