| Package | Affected versions | Patched versions |
|---|---|---|
| leaguemanager | = 1.0= 1.1= 1.2= 1.2.1= 1.2.2= 1.3= 1.4= 1.4.1= 1.4.2= 1.5= 2.0= 2.1= 2.2= 2.3= 2.3.1= 2.4= 2.4.1= 2.5= 2.5.1= 2.5.2= 2.6= 2.6.1= 2.6.2= 2.6.3= 2.7= 2.7.1= 2.8= 2.9= 2.9.1= 2.9.2= 2.9.3= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.1= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.1.6= 3.1.7= 3.1.8= 3.1.9= 3.2= 3.2.1= 3.2.2= 3.3= 3.3.1= 3.4= 3.4.1= 3.4.2= 3.5= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.6= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.6.5= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 3.7≤ 3.8 |
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free