Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: azzaroco Component: Ultimate Learning Pro Clear all filters
TI-2024-12868 CVE-2024-13846 · GHSA-vrvx-7jh3-63wq

Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter

Priority LOW 23

The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied para…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00397 Published 2025-02-21 No fix listed CWE-89