CVSS: 8.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-51547 – WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection
https://notcve.org/view.php?id=CVE-2023-51547
27 Dec 2023 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through 1.7.6. Neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando SQL ('inyección SQL') en WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugi... • https://patchstack.com/database/vulnerability/fluent-support/wordpress-fluent-support-plugin-1-7-6-sql-injection-vulnerability?_s_id=cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.3EPSS: 0%CPEs: 1EXPL: 1CVE-2022-2559 – Fluent Support < 1.5.8 - Admin+ SQLi
https://notcve.org/view.php?id=CVE-2022-2559
02 Aug 2022 — The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users El plugin Fluent Support de WordPress versiones anteriores a 1.5.8, no sanea, comprueba y escapa de varios parámetros antes de usarlos en una sentencia SQL, conllevando a una vulnerabilidad de inyección SQL explotable por usuarios con altos privilegios The Fluent Support plugin ... • https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •