| Package | Affected versions | Patched versions |
|---|---|---|
| participants database | = 1.5.4= 1.5.4.1= 1.5.4.2= 1.5.4.3= 1.5.4.4= 1.5.4.5= 1.5.4.6= 1.5.4.7≤ 1.5.4.8 |
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free