Smartypantsplugins: >> Sp Rental Manager >> 1.5.3 Security Vulnerabilities
The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve information contained in a site's database, in versions up to and including 1.5.3.
CVSS Score
8.2
EPSS Score
0.005
Published
2021-09-09