CVE-2020-5766

HIGH 7.5 CVSS 3.1

Published: July 13, 2020
Last modified: June 17, 2026
NVD status: Modified
Reported by: vulnreport@tenable.com
Weakness: CWE-89
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.

Affected products and versions

n/a SRS Simple Hits Counter Plugin for WordPress — Version 1.0.3, 1.0.4
srs_simple_hits_counter_project srs_simple_hits_counter — Version 1.0.3
srs_simple_hits_counter_project srs_simple_hits_counter — Version 1.0.4

References

www.tenable.com https://www.tenable.com/security/research/tra-2020-42 Exploit, Third Party Advisory
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References