← Back

Membermouse

membermouse

Vendor: Membermouse • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11309
1Membermouse
1Membermouse
Nov 21, 2024
May 28, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admin-ajax.php request.