CVE-2017-18573 – Simple Login Log < 1.1.2 - SQL Injection
https://notcve.org/view.php?id=CVE-2017-18573
The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. El plugin simple-login-log versiones anteriores a 1.1.2 para WordPress, presenta una inyección SQL. The simple-login-log plugin before 1.1.2 for WordPress has SQL injection via the 'order' parameter in the get_results function. • https://wordpress.org/plugins/simple-login-log/#developers • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2017-18514 – Simple Login Log < 1.1.2 - SQL Injection
https://notcve.org/view.php?id=CVE-2017-18514
The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. El plugin simple-login-log versiones anteriores a 1.1.2 para WordPress, presenta una inyección SQL. The simple-login-log plugin before 1.1.2 for WordPress has SQL injection via the 'orderby' parameter in the get_results function. • https://wordpress.org/plugins/simple-login-log/#developers • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •