CVE-2021-38324 — SP Rental Manager <= 1.5.3 Unauthenticated SQL Injection
The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve inform…
Published: 2021-09-09 · CVSS: 8.2 · CVSS 3.1
The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve information contained in a site's database, in versions up to and including 1.5.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7