Vulnerabilities

TI-2018-02783 CVE-2018-3811 · GHSA-cfg5-442r-vwqv

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5…

HIGH 70

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.42283 Published 2018-01-01 No fix listed CWE-89

TI-2018-02782 CVE-2018-3810 · GHSA-f59r-v67m-78wf

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin…

CRITICAL 85

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic paramet…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.91304 Published 2018-01-01 No fix listed CWE-287

Vulnerabilities

Filters

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5…

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin…