Calendarscripts: >> Watupro >> 3.8 Security Vulnerabilities
SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php.
CVSS Score
9.8
EPSS Score
0.125
Published
2017-09-07